diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-05-18 08:01:09 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-05-18 08:11:18 +0800 |
| commit | a7d3835cb9f2322a2bb9d3b54bd2dc8c4a590702 (patch) | |
| tree | 73faf23061e5528c357c7da2cd510e46135dbad4 /runtime/lua/vim/range.lua | |
| parent | 7096631249b83b5d1067884761782d298c3661a0 (diff) | |
| download | rneovim-a7d3835cb9f2322a2bb9d3b54bd2dc8c4a590702.tar.gz rneovim-a7d3835cb9f2322a2bb9d3b54bd2dc8c4a590702.tar.bz2 rneovim-a7d3835cb9f2322a2bb9d3b54bd2dc8c4a590702.zip | |
vim-patch:9.2.0495: [security]: runtime(netrw): code injection via NetrwBookHistSave()
Problem: [security]: runtime(netrw): code injection via
NetrwBookHistSave()
Solution: Properly quote the directory name using string() function
(Srinivas Piskala Ganesh Babu)
Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c
https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/range.lua')
0 files changed, 0 insertions, 0 deletions