diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-05-15 09:06:11 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-05-15 09:09:35 +0800 |
| commit | 10432d0df814ffeeee11ef2db118385add36a830 (patch) | |
| tree | d78670d6aa3af72a8dc742dcbead62c3e2d1b4d5 /runtime/lua/vim/_stringbuffer.lua | |
| parent | 86c57031110a25e362f30a17c1d2997bb947c7cb (diff) | |
| download | rneovim-10432d0df814ffeeee11ef2db118385add36a830.tar.gz rneovim-10432d0df814ffeeee11ef2db118385add36a830.tar.bz2 rneovim-10432d0df814ffeeee11ef2db118385add36a830.zip | |
vim-patch:9.2.0481: runtime(netrw): command injection possible via maps
Problem: runtime(netrw): command injection possible via crafted
directory names in NetrwMaps() (Christopher Lusk)
Solution: Temporarily remove B flag in NetrwMaps() to prevent command
injection
https://github.com/vim/vim/commit/8e41c34aba0e775d2e3bf6f0e2da1b1c5317f3df
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/_stringbuffer.lua')
0 files changed, 0 insertions, 0 deletions