So in order to invoke foreign code the attacker must first write into a shell sc...

		1718627440 3 months ago \| parent \| context \| favorite \| on: Breaking Git with a carriage return and cloning RC... So in order to invoke foreign code the attacker must first write into a shell script located under A/.git/hooks, where A is missing the CR as opposed to the original path? I think when you can write shell scripts to .git/hooks it is already game over, no?