You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
GitArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What
A hostname parsed out of a git remote URL must now consist only of letters, digits, dots and hyphens and must not start with a hyphen, on top of the existing checks for a dot and an alphabetic top-level domain. This stops a crafted remote URL from producing a host that later looks like a command-line option.
Evidence
/^[A-Za-z0-9.-]+$/
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
