summaryrefslogtreecommitdiff
path: root/git/repo/base.py
diff options
context:
space:
mode:
authorSebastian Thiel <sebastian.thiel@icloud.com>2022-12-22 17:08:42 +0100
committerSebastian Thiel <sebastian.thiel@icloud.com>2022-12-22 17:08:42 +0100
commit787359d80d80225095567340aa5e7ec01847fa9a (patch)
tree41947c5be7875e746b6e1452add2b92283e926b4 /git/repo/base.py
parent17ff2630af26b37f82ac1158ee3495c4390da699 (diff)
parent2aae532a3993a100d5074cde70abe548cfc45861 (diff)
downloadgitpython-787359d80d80225095567340aa5e7ec01847fa9a.tar.gz
Merge branch 'fix-cmd-injection'
Diffstat (limited to 'git/repo/base.py')
-rw-r--r--git/repo/base.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/git/repo/base.py b/git/repo/base.py
index c49c6118..49a3d5a1 100644
--- a/git/repo/base.py
+++ b/git/repo/base.py
@@ -1169,6 +1169,7 @@ class Repo(object):
multi = shlex.split(" ".join(multi_options))
proc = git.clone(
multi,
+ "--",
Git.polish_url(str(url)),
clone_path,
with_extended_output=True,
@@ -1305,7 +1306,7 @@ class Repo(object):
if not isinstance(path, (tuple, list)):
path = [path]
# end assure paths is list
- self.git.archive(treeish, *path, **kwargs)
+ self.git.archive("--", treeish, *path, **kwargs)
return self
def has_separate_working_tree(self) -> bool: