1 files changed, 2 insertions, 0 deletions
diff --git a/connect.c b/connect.c
index 879669df93..40b5c15f81 100644
--- a/connect.c
+++ b/connect.c
@@ -1186,6 +1186,8 @@ static struct child_process *git_connect_git(int fd[2], char *hostandport,
 		target_host = xstrdup(hostandport);
 
 	transport_check_allowed("git");
+	if (strchr(target_host, '\n') || strchr(path, '\n'))
+		die(_("newline is forbidden in git:// hosts and repo paths"));
 
 	/*
 	 * These underlying connection commands die() if they