security - fix Git argument injection via untrusted Kptfile ref enables file overwrite (#4604)

Signed-off-by: tar <gabor.tar.ext@nokia.com>

Author: tgzsolt