Junio C Hamano <gitster@xxxxxxxxx> writes: > ... But use of _by_name() that does > not limit the input to hexadecimal _is_ a problem ... Ah, no, sorry, this was wrong. The original used "rev-parse -q --verify" without restricting the "single word" to "sha1 prefix".