(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('test_description', {[SQ <LIT_CHARS "test protocol whitelisting with submodules">]})])
  (Com {[LIT_CHARS .]} {[LIT_CHARS ./test-lib.sh]})
  (Com {[LIT_CHARS .]} {[DQ [VarSub TEST_DIRECTORY]] [LIT_CHARS /lib-proto-disable.sh]})
  (Com {[LIT_CHARS setup_ext_wrapper]})
  (Com {[LIT_CHARS setup_ssh_wrapper]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "setup repository with submodules">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkdir remote &&\n"> <LIT_CHARS "\tgit init remote/repo.git &&\n"> <LIT_CHARS "\t(cd remote/repo.git && test_commit one) &&\n"> <LIT_CHARS "\t# submodule-add should probably trust what we feed it on the cmdline,\n"> <LIT_CHARS "\t# but its implementation is overly conservative.\n"> <LIT_CHARS "\tGIT_ALLOW_PROTOCOL=ssh git submodule add remote:repo.git ssh-module &&\n"> <LIT_CHARS "\tGIT_ALLOW_PROTOCOL=ext git submodule add \"ext::fake-remote %S repo.git\" ext-module &&\n"> <LIT_CHARS "\tgit commit -m \"add submodules\"\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "clone with recurse-submodules fails">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\ttest_must_fail git clone --recurse-submodules . dst\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "setup individual updates">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\trm -rf dst &&\n"> <LIT_CHARS "\tgit clone . dst &&\n"> <LIT_CHARS "\tgit -C dst submodule init\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "update of ssh allowed">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tgit -C dst submodule update ssh-module\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "update of ext not allowed">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\ttest_must_fail git -C dst submodule update ext-module\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "user can override whitelist">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tGIT_ALLOW_PROTOCOL=ext git -C dst submodule update ext-module\n">]})
  (Com {[LIT_CHARS test_done]})
)