update for cgit (important)

Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments...