1#!/bin/sh
   2test_description='test protocol whitelisting with submodules'
   4. ./test-lib.sh
   5. "$TEST_DIRECTORY"/lib-proto-disable.sh
   6setup_ext_wrapper
   8setup_ssh_wrapper
   9test_expect_success 'setup repository with submodules' '
  11        mkdir remote &&
  12        git init remote/repo.git &&
  13        (cd remote/repo.git && test_commit one) &&
  14        # submodule-add should probably trust what we feed it on the cmdline,
  15        # but its implementation is overly conservative.
  16        GIT_ALLOW_PROTOCOL=ssh git submodule add remote:repo.git ssh-module &&
  17        GIT_ALLOW_PROTOCOL=ext git submodule add "ext::fake-remote %S repo.git" ext-module &&
  18        git commit -m "add submodules"
  19'
  20test_expect_success 'clone with recurse-submodules fails' '
  22        test_must_fail git clone --recurse-submodules . dst
  23'
  24test_expect_success 'setup individual updates' '
  26        rm -rf dst &&
  27        git clone . dst &&
  28        git -C dst submodule init
  29'
  30test_expect_success 'update of ssh allowed' '
  32        git -C dst submodule update ssh-module
  33'
  34test_expect_success 'update of ext not allowed' '
  36        test_must_fail git -C dst submodule update ext-module
  37'
  38test_expect_success 'user can override whitelist' '
  40        GIT_ALLOW_PROTOCOL=ext git -C dst submodule update ext-module
  41'
  42test_done