From: Junio C Hamano Date: Thu, 04 Sep 2014 21:36:09 GMT Subject: Re: git format-patch --in-reply-to allows header injection. Intended? Message-ID: In-Reply-To: <5408D7ED.9010203@nh2.me> Niklas Hambüchen writes: > For example, if you pass "--in-reply-to=\nTo: (notice lack of trailing `>`), then the generated email will actually > contain a > To: > header. While I do not think of a reason to specify such a string to the in-reply-to option (I'd rather edit the output in the editor if I wanted to do anything fancy [*1*]), I do not think there is a reason why you want to add a code to forbid such use, either. [Footnote] *1* For that matter, --in-reply-to option itself is superfluous.