From a2a1a65b98ad88d69906b9c372dca1c3063100ef Mon Sep 17 00:00:00 2001
From: zeertzjq <zeertzjq@outlook.com>
Date: Sun, 29 Oct 2023 06:15:13 +0800
Subject: vim-patch:8ebdbc9e6d80 (#25816)

runtime(doc): all secure options should note this restriction in the documentation (vim/vim#13448)

Problem:  Not all secure options document their status
Solution: Describe secure context :set restrictions in each help entry

https://github.com/vim/vim/commit/8ebdbc9e6d80b707c2b2d923e702dc86bf902923

Co-authored-by: dkearns <dougkearns@gmail.com>
---
 src/nvim/options.lua | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

(limited to 'src')

diff --git a/src/nvim/options.lua b/src/nvim/options.lua
index 9629a3c4ce..c244b83c9e 100644
--- a/src/nvim/options.lua
+++ b/src/nvim/options.lua
@@ -942,6 +942,8 @@ return {
         current working directory to the |$HOME| directory like in Unix.
         When off, those commands just print the current directory name.
         On Unix this option has no effect.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       full_name = 'cdhome',
       scope = { 'global' },
@@ -5254,7 +5256,8 @@ return {
         <	If you have less than 512 Mbyte |:mkspell| may fail for some
         languages, no matter what you set 'mkspellmem' to.
 
-        This option cannot be set from a |modeline| or in the |sandbox|.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       expand = true,
       full_name = 'mkspellmem',
@@ -5830,6 +5833,8 @@ return {
       desc = [=[
         Directories used to find packages.
         See |packages| and |packages-runtimepath|.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       expand = true,
       full_name = 'packpath',
@@ -5878,6 +5883,8 @@ return {
       desc = [=[
         Expression which is evaluated to apply a patch to a file and generate
         the resulting new version of the file.  See |diff-patchexpr|.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       full_name = 'patchexpr',
       scope = { 'global' },
@@ -7256,6 +7263,8 @@ return {
         When 'shellxquote' is set to "(" then the characters listed in this
         option will be escaped with a '^' character.  This makes it possible
         to execute most external commands with cmd.exe.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       full_name = 'shellxescape',
       scope = { 'global' },
@@ -8464,6 +8473,8 @@ return {
         function and an example.  The value can be the name of a function, a
         |lambda| or a |Funcref|. See |option-value-function| for more
         information.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       full_name = 'tagfunc',
       func = true,
@@ -9297,6 +9308,8 @@ return {
         Setting 'verbosefile' to a new value is like making it empty first.
         The difference with |:redir| is that verbose messages are not
         displayed when 'verbosefile' is set.
+        This option cannot be set from a |modeline| or in the |sandbox|, for
+        security reasons.
       ]=],
       expand = true,
       full_name = 'verbosefile',
-- 
cgit