This is insecure. You should use:

```ruby
unknow_refs = IO.popen(%W(git rev-list #{@oldrev}..#{@newrev} --)).read
```