The git reflog command now has stricter safety validation:
- Explicitly whitelists only "show" and "list" as safe subcommands
- Blocks "expire", "delete", "exists", "drop", and "write" as dangerous (previously only blocked "expire", "delete", "exists")
- Any unrecognized first argument that isn't a flag is treated as potentially dangerous
Evidence
Git reflog safety callback (search for "expire", "delete", "exists", "drop", "write") in the git command validator
Strings lifted out of the shipped bundle, so the claim above can be checked against them.