Harden gitlab-shell against arguments following the gl_id parameter in the command line

bin/gitlab-shell

@@ -19,7 +19,7 @@ require File.join(ROOT_PATH, 'lib', 'gitlab_shell')
 
 # We must match e.g. "key-12345" anywhere on the command-line. See
 # https://gitlab.com/gitlab-org/gitlab-shell/issues/145
-who = /\b(?:(?:key|user)-[0-9]+|username-\S+)\b/.match(ARGV.join).to_s;
+who = /\b(?:(?:key|user)-[0-9]+|username-\S+)\b/.match(ARGV.join(' ')).to_s
 
 if GitlabShell.new(who).exec(original_cmd)
   exit 0

spec/gitlab_shell_gitlab_shell_spec.rb

@@ -130,21 +130,21 @@ describe 'bin/gitlab-shell' do
   # Not so basic valid input
   # (https://gitlab.com/gitlab-org/gitlab-shell/issues/145)
   it 'succeeds and prints username when a valid known key id is given in the middle of other input' do
-    output, status = run!(["-c/usr/share/webapps/gitlab-shell/bin/gitlab-shell key-100"])
+    output, status = run!(["-c/usr/share/webapps/gitlab-shell/bin/gitlab-shell", "key-100", "2foo"])
 
     expect(output).to eq("Welcome to GitLab, @someuser!\n")
     expect(status).to be_success
   end
 
   it 'succeeds and prints username when a valid known user id is given in the middle of other input' do
-    output, status = run!(["-c/usr/share/webapps/gitlab-shell/bin/gitlab-shell user-10"])
+    output, status = run!(["-c/usr/share/webapps/gitlab-shell/bin/gitlab-shell", "user-10", "2foo"])
 
     expect(output).to eq("Welcome to GitLab, @someuser!\n")
     expect(status).to be_success
   end
 
   it 'succeeds and prints username when a valid known username is given in the middle of other input' do
-    output, status = run!(["-c/usr/share/webapps/gitlab-shell/bin/gitlab-shell username-someuser"])
+    output, status = run!(["-c/usr/share/webapps/gitlab-shell/bin/gitlab-shell", "username-someuser" ,"foo"])
 
     expect(output).to eq("Welcome to GitLab, @someuser!\n")
     expect(status).to be_success