Subject: git format-patch --in-reply-to allows header injection. Intended?

From: Niklas Hambüchen <[email-masked]>
Date: Thu, 04 Sep 2014 23:21:49 +0200

Hi,

I just wanted to ask if the --in-reply-to flag of git format-patch is
supposed to write the given string unmodified into the email or whether
it ought to perform some check against header injection.

For example, if you pass "--in-reply-to=<msgid>\nTo: <[email-masked]"
(notice lack of trailing `>`), then the generated email will actually
contain a
  To: <[email-masked]>
header.

(Depending on your shell you might also use "--in-reply-to=`cat`" to get
the above working more easily.)

Is this known and working as intended, or undesired?

Thanks!
Niklas