Only hostname (i.e. the thing between git:// and the next slash) is passed as an argument to the proxy command, so slashes in the payload had to be escaped.