From c13506c41a21ae32125f31097b868ac090b926c1 Mon Sep 17 00:00:00 2001
From: Matthias Jaros <jarlucmat@mailbox.org>
Date: Mon, 3 Aug 2026 15:01:15 +0200
Subject: Use -- to prevent further commands passed through variables

---
 src/git-run | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/git-run b/src/git-run
index 6d541d0..ec27989 100755
--- a/src/git-run
+++ b/src/git-run
@@ -84,4 +84,4 @@ begin
 	emit log ALLOW ok "argv=$argv"
 end &>>$_LOG
 
-exec /usr/bin/sudo -n -u git /usr/bin/git-shell -c "$gitCommand '$repoDir'"
+exec /usr/bin/sudo -n -u git /usr/bin/git-shell -c -- "$gitCommand '$repoDir'"
-- 
cgit v1.3.1