gitpython-developers
diff --git a/‎git/diff.py‎
Lines changed: 2 additions & 2 deletions b/‎git/diff.py‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎git/repo/base.py‎
Lines changed: 2 additions & 0 deletions b/‎git/repo/base.py‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎test/test_diff.py‎
Lines changed: 11 additions & 0 deletions b/‎test/test_diff.py‎
Lines changed: 11 additions & 0 deletions
@@ -239,8 +239,8 @@ def diff(
             to be read and diffed.
 
         :param allow_unsafe_options:
-            If ``True``, allow options such as ``--output`` and ``-O`` that can write to
-            or read from arbitrary filesystem paths.
+            If ``True``, allow options such as ``--output``, ``--no-index``, and ``-O``
+            that can write to or read from arbitrary filesystem paths.
 
         :param kwargs:
             Additional arguments passed to :manpage:`git-diff(1)`, such as ``R=True`` to
 
@@ -209,6 +209,8 @@ class Repo:
     ]
 
     unsafe_git_diff_options = unsafe_git_revision_options + [
+        # Treats path operands as arbitrary filesystem paths.
+        "--no-index",
         # Reads caller-controlled order patterns from an arbitrary file.
         "-O",
         "--orderfile",
 
@@ -412,6 +412,17 @@ def test_diff_rejects_unsafe_output_options(self):
         commit.diff(output=allowed_target, allow_unsafe_options=True)
         self.assertTrue(osp.isfile(allowed_target))
 
+    def test_diff_rejects_no_index(self):
+        calls = (
+            lambda: self.rorepo.head.commit.diff(no_index=True),
+            lambda: self.rorepo.head.commit.diff(other="--no-index"),
+            lambda: self.rorepo.index.diff(None, no_index=True),
+            lambda: self.rorepo.index.diff("--no-index"),
+        )
+        for call in calls:
+            with self.assertRaises(UnsafeOptionError):
+                call()
+
     def test_diff_interface(self):
         """Test a few variations of the main diff routine."""
         assertion_map = {}
Original file line number	Diff line number	Diff line change
`@@ -209,6 +209,8 @@ class Repo:`
`209`	`209`	`]`
`210`	`210`
`211`	`211`	`unsafe_git_diff_options = unsafe_git_revision_options + [`
	`212`	`+ # Treats path operands as arbitrary filesystem paths.`
	`213`	`+ "--no-index",`
`212`	`214`	`# Reads caller-controlled order patterns from an arbitrary file.`
`213`	`215`	`"-O",`
`214`	`216`	`"--orderfile",`