Mine

#!/bin/sh
# rsync_validate.sh

case "$SSH_ORIGINAL_COMMAND" in
*\&*)
echo "Rejected"
;;
*\(*)
echo "Rejected"
;;
*\{*)
echo "Rejected"
;;
*\;*)
echo "Rejected"
;;
*\<*)
echo "Rejected"
;;
*\`*)
echo "Rejected"
;;
rsync\ --server*)
$SSH_ORIGINAL_COMMAND
;;
mount*)
$SSH_ORIGINAL_COMMAND
;;
umount*)
$SSH_ORIGINAL_COMMAND
;;
test*)
$SSH_ORIGINAL_COMMAND
;;
*)
echo "Rejected"
;;
esac
~