commit 82e9b6ff0ab571ef441ed5356a0725736d00016f
from: Stefan Sperling <stsp@stsp.name>
date: Thu Jul 17 12:05:30 2025 UTC

forbid the '$' and '#' symbols in gotsys.conf reference names

These symbols are also part of configuration file syntax and should
therefore be avoided.

commit - ce39a4c074fdcf028556a8303ab564bb84efa5a0
commit + 82e9b6ff0ab571ef441ed5356a0725736d00016f
blob - ef50d4397db523880b04c798f4aa21619f7875d9
blob + de9309635fb9ef5f8fdebd0e38d618e1d2798de4
--- gotsys/gotsys.conf.5
+++ gotsys/gotsys.conf.5
@@ -269,7 +269,9 @@ are non-empty UTF-8 strings with the following disallo
 \' (single quote),
 { (opening curly brace),
 } (closing curly brace),
-= (equal sign).
+= (equal sign),
+# (hash),
+$ (doller sign).
 The name may not be the string
 .Dq @ ,
 may not begin with a / (slash), and may not begin or end
blob - 08b407f0d09827e5b609d2b71ef87965e3228586
blob + 9b8f7591885f6d4d616238ab087b01a936bb871e
--- gotsys/parse.y
+++ gotsys/parse.y
@@ -1132,7 +1132,7 @@ int
 gotsys_ref_name_is_valid(char *refname)
 {
 	const char *s;
-	const char forbidden[] = { '\'', '"', '{' , '}', '=' };
+	const char forbidden[] = { '\'', '"', '{' , '}', '=', '$', '#' };
 	size_t i;
 
 	s = refname;