Important security fix

Fixes an issue where crafted branch names could execute bash commands when moving into a git clone with cd.

See merged upstream PR: magicmonty#313