STORY · VERKTOY_
Git gets better security against filename attacks with –end-of-options flag
Git implements the `–end-of-options` flag which makes it possible to clearly separate git commands from file arguments. This prevents filenames starting with a hyphen from being interpreted as command flags, which can be exploited as attack vectors.
WHY IT MATTERS
The security improvement is important because it closes holes where filenames can be misused to inject unwanted git operations. This is especially relevant for automated systems and scripts that process filenames from untrusted sources.
SOURCES
MACHINE-GENERATED SUMMARY This summary is written by machine from the sources below. We sort and explain — but we are a way into the field, not the final word. Check the source when something matters to you.