Get security fix

Fixes #63.  I attempted to literally cherry pick the original but ran into a bug with git-remote-hg, forgive me for having my name in the author etc.