diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-05-15 09:05:23 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-05-15 09:05:59 +0800 |
| commit | 86c57031110a25e362f30a17c1d2997bb947c7cb (patch) | |
| tree | 03d846b0c5eec61e31dc048e87e3cc48ea5bd074 /runtime/lua/vim/_stringbuffer.lua | |
| parent | 1e09b020e57f203636bdf1199eb1bc8bb2d364a4 (diff) | |
| download | rneovim-86c57031110a25e362f30a17c1d2997bb947c7cb.tar.gz rneovim-86c57031110a25e362f30a17c1d2997bb947c7cb.tar.bz2 rneovim-86c57031110a25e362f30a17c1d2997bb947c7cb.zip | |
vim-patch:9.2.0480: [security]: runtime(netrw): code injection via mf command
Problem: [security]: runtime(netrw): code injection via mf command
(Christopher Lusk, Zdenek Dohnal)
Solution: Do not use string concatenation inside the filter() commands
(Zdenek Dohnal)
Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3
https://github.com/vim/vim/commit/8af0f098c3a42a28661d0295364e6e0fd7dbc92c
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/_stringbuffer.lua')
0 files changed, 0 insertions, 0 deletions