Code scanning alert sourcegraph#90 flagged a user-influenced argument passed to git ls-remote where input could be interpreted as CLI flags. This update applies a minimal argument-boundary fix so repository URLs are always treated as positional input.

• Alert remediation

  • Updated the git ls-remote call in cmd/gitserver/server/serverutil.go to terminate option parsing before user-controlled URL input.

• Code change

  // before
  exec.Command("git", "ls-remote", url, prefix+"*")
  
  // after
  exec.Command("git", "ls-remote", "--", url, prefix+"*")

• Scope

  • Single targeted production-code change.
  • No unrelated refactors or behavior changes beyond safe argument handling.

Test Plan

Code Hosts

• GitHub
• GitHub Enterprise
• Refined GitHub
• Phabricator
• Phabricator integration
• Bitbucket
• Bitbucket integration
• Gitlab

Browsers

• Chrome
• Firefox