Comment Comment by justsomeadvice0 Lots of people end up with AgentForward on by default as a sort of "make it work" fix, and lots of people use `git+ssh` on untrusted servers. Here's an example:https://abyssdomain.expert/@filippo/109659699817863532TBF this is a vulnerable config either way; but RCE on the client shouldn't be possible. parent justsomeadvice0 3 years ago
https://abyssdomain.expert/@filippo/109659699817863532
TBF this is a vulnerable config either way; but RCE on the client shouldn't be possible.