@n8 @liw git has a config option to prevent receiving objects that could be CVE-2018-11235 exploits. Or could just look enough like one.

So, git objects that were legal before are not now, which is an interesting development in a version control system.