Fix FindCommits flag injection exploit (cherry picked backport) (!1419) · Merge requests · GitLab.org / gitaly · GitLab

Paul Okstad (ex-GitLab) requested to merge po-backport-rev-injection-fix into 1-58-stable Aug 13, 2019

Due to a regression with Gitaly's commit signature RPC (see https://gitlab.com/gitlab-org/gitlab-ce/-/jobs/271054310), this backport will fix the version prior with the fix cherry picked from https://dev.gitlab.org/gitlab/gitaly/merge_requests/31.