On Thu, Mar 25, 2021 at 05:21:24PM +0100, René Scharfe. wrote: > When sanitizing client-supplied strings on Windows, also strip off > backslashes, not just slashes. > [...] > static void sanitize_client(struct strbuf *out, const char *in) > { > for (; *in; in++) { > - if (*in == '/') > + if (is_dir_sep(*in)) Yeah, this seems like the obviously correct thing to be doing. -Peff