mirror of https://github.com/bitcoin/bitcoin
Any attacker who managed to make an evil commit that changed something in the contrib/verify-commits/ directory could just as easily remove the warning and/or modify it to not display the evil commits; telling the user to check those commits specifically misleads them into checking just those commits rather than the script itself.pull/7713/head
parent
9523e8adaf
commit
22421faa19
Loading…
Reference in new issue