Fix command injection vulnerability

[69]

No description provided.

[toufik-airane]

Can you provide a testing case to prove the successful mitigation?
Thank you.

[69]

The original POC no longer works:

// poc.js
const Repo = require("gry");
var myRepo = new Repo(".");
myRepo.pull('test; touch HACKED; #', function(){console.log('Finished!')})

and instead throws an error:

Error: fatal: 'test;' does not appear to be a git repository
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.

[JamieSlome]

We will re-review this pull request next week - thanks for the contribution! 🍰

[toufik-airane]

Thank you. LGTM. 👍

[huntr-helper]

Congratulations @69 - your fix has been selected! 🎉

Thanks for being part of the community & helping secure the world's open source code.
If you have any questions, please respond in the comments section. Your bounty is on its way - keep hunting!