use safeOutput when quoting UnquotedString
authorJoey Hess <joeyh@joeyh.name>
Mon, 10 Apr 2023 18:43:17 +0000 (14:43 -0400)
committerJoey Hess <joeyh@joeyh.name>
Mon, 10 Apr 2023 18:46:17 +0000 (14:46 -0400)
commit007e30263777163d72db5380ff25744cf6eda314
treeac6b3478eecaf5610c7f99ca4e7dd1b1cb0d9234
parentcd544e548b91fe7a940a2221414e3df6f9ca80f9
use safeOutput when quoting UnquotedString

UnquotedString does not need to be quoted, but still it's possible
it contains something attacker-controlled, which could have an
escape sequence or control character in it. This is a convenient
place to filter out such things, since quoting alrready handles
those in filenames.

Sponsored-by: Luke Shumaker on Patreon
Git/Filename.hs