Hi, I took a quick look at [1] at it seems like checking that the supplied URL starts with https://svn.apache.org/repos/asf/ and only contains valid path characters after that would eliminate Daniel's issues.
I've never touched whimsy code and I'm not fluent in Ruby so I'm not going to make changes, consider this as just my 2 swiss centimes of advice. -Bertrand [1] https://github.com/apache/whimsy/blob/master/www/committers/svn-info.cgi
