      def ls_files(query, options = {})
        options[:ref] = options[:ref] ? options[:ref] : "HEAD"
        query = Shellwords.shellescape(query)
        @git.ls_files({}, "*#{query}*").split("\n")
      end
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.