Function isGitRefValid

packages/web/src/features/git/utils.ts:4–6

(ref: string)

// @note: reject refs starting with '-' to prevent git flag injection.
export const isGitRefValid = (ref: string): boolean => {
    return !ref.startsWith('-');
}

// @note: we don't allow directory traversal
// or null bytes in the path.