- Add --no-ignore to the "svn stat" command line so we pick up things
  like LINT etc which are normally hidden but can cause surprises.
- Validate and untaint the SVN base URL.
- In spawn(), check whether the command and arguments are tainted so we
  can more easily debug future occurrences.