e582b269f1
Call validate_ref_name on the user-provided branch name before constructing the symbolic-ref argument to prevent command injection.