Description Tomasz Zarna 2011-06-16 11:53:49 EDT

Steps:
1. Start Orion server
2. With a REST client of your choice add a new option, for curl I used:
curl --basic --user test:test -H "Orion-Version: 1.0" -X POST -d "{'Key':'.b', 'Value':'c'}" http://localhost:8080/gitapi/config/clone/file/d2/ -v
3. The new option has been created (201)
4. config file got a new section like this:
[]
 b = c

which is kind of ok, because doing the same thing in the console (git config ".b" c) would let to the same result. However, the repository is now broken, e.g. try to get status (git status).

We could consider blocking such requests.