From 5f1535c8ee25f4982becdf42d94f7b1743fa96e4 Mon Sep 17 00:00:00 2001
From: Erik Nijenhuis <erik@xerdi.com>
Date: Sat, 6 Apr 2024 15:00:04 +0200
Subject: [PATCH] Use restricted shell for manual

---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 7a752a2..3799591 100644
--- a/Makefile
+++ b/Makefile
@@ -2,8 +2,8 @@ CONTRIBUTION = gitinfo-lua
 VERSION = $(shell git describe --tags --always)
 FILE = ${CONTRIBUTION}-${VERSION}.tar.gz
 MANUAL = doc/${CONTRIBUTION}
-CNF_LINE = -cnf-line TEXMFHOME={${CURDIR},$(shell kpsewhich --var-value TEXMFHOME)}
-COMPILER = lualatex --shell-escape --interaction=nonstopmode $(CNF_LINE)
+CNF_LINE = -cnf-line TEXMFHOME={${CURDIR},$(shell kpsewhich --var-value TEXMFHOME)} -cnf-line shell_escape_commands=git
+COMPILER = lualatex --shell-restricted --interaction=nonstopmode $(CNF_LINE)
 RM = rm
 ifeq ($(OS),Windows_NT)
 RM = del