diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-05-24 09:29:50 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-05-24 09:29:50 +0800 |
| commit | 61eddb3fe7b01fb904bb9a87a78ef1239c01eb2e (patch) | |
| tree | 49f659d19a61911abd4fc573ef44c0c5aa95d78a /runtime/syntax/cpp.vim | |
| parent | 1a064abb0a73401b98b81463e89e2f2da8499baf (diff) | |
| download | rneovim-61eddb3fe7b01fb904bb9a87a78ef1239c01eb2e.tar.gz rneovim-61eddb3fe7b01fb904bb9a87a78ef1239c01eb2e.tar.bz2 rneovim-61eddb3fe7b01fb904bb9a87a78ef1239c01eb2e.zip | |
vim-patch:9.2.0523: tests: no test for using shellescape() in combination with :! (#39972)
Problem: tests: no test for using shellescape() in combination with :!
Solution: Add a test that checks runtime files for using wrong
combination of shellescape() with ! ex command
This has lead to a few security relevant issues, so add a test that
checks all runtime files for any ! followed by a shellescape() that does
not use the {special} arg.
related: Commit: 3fb5e58fbc63d86a3e65f1a141b0d67af2 (patch 9.2.0479:
[security]: runtime(tar): command injection in tar plugin)
closes: vim/vim#20286
Supported by AI
https://github.com/vim/vim/commit/fccc2adc98c3d6664f1f2d8ddab17b096e647986
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/syntax/cpp.vim')
0 files changed, 0 insertions, 0 deletions