How does #!/bin/sh - in shell script can prevent spoofing attacks

See more:

Linux

shellscript

There is a sentence "#!/bin/sh - The bare option - says that there are no more shell options; this is a security feature to prevent certain kinds of spoofing attack" in book "Classic Shell Scripting".
How does "-" work ? Please show me an example.
Thanks for your attention.