add shellescape for some path arguments

git.clone method: add shellescape for from string
git.download_and_extract_tarball method: add shellescape for all paths
update "updates the cache if the ref is not available": add shellescape for git clone arguments