Over the past few years there's been a few vulnerabilities in Git that result from an attacker injecting hooks into a repo. I wonder whether it'd be possible / worthwhile to disable hooks by default, and only enable them on a per-repo basis.
Of course, then the goal just becomes attacking that whitelist, and all the complexity that comes with that. Security is hard.
Of course, then the goal just becomes attacking that whitelist, and all the complexity that comes with that. Security is hard.