Serendipitously comes one day after this story[1] was on the front page: at least one Debian maintainer failing to realize the risks of non-alphanumeric usernam

Serendipitously comes one day after this story[1] was on the front page: at least one Debian maintainer failing to realize the risks of non-alphanumeric usernames. "What could go wrong?" Well, here's Git allowing branch names to contain dollar signs, backticks, etc., because "what could go wrong?"... and... well, this could. Names are identifiers. Allowing identifiers to contain anything besides identifier characters merely opens new and weird attack vectors. [1] https://news.ycombinator.com/item?id=42338134 https://news.ycombinator.com/item?id=42338134