diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-06-27 17:11:42 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-27 09:11:42 +0000 |
| commit | 6a61c81e312b0783f9f5ddd5eb7348bda5e09830 (patch) | |
| tree | fb86b77c77e0ce95f56730a7cdb6b96b92636880 /test/functional/vimscript/executable_spec.lua | |
| parent | d844a276bb0ca7fa721f2d688f8060a990d6ec36 (diff) | |
| download | rneovim-6a61c81e312b0783f9f5ddd5eb7348bda5e09830.tar.gz rneovim-6a61c81e312b0783f9f5ddd5eb7348bda5e09830.tar.bz2 rneovim-6a61c81e312b0783f9f5ddd5eb7348bda5e09830.zip | |
vim-patch:partial:9.2.0736: potential command execution in PHP omni-completion (#40445)
Problem: With PHP omni-completion, a crafted file can potentially
execute arbitrary commands when completing a class member.
Solution: Quote the class name before inserting it into the search()
pattern run via win_execute().
https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24
Tests only. The bug is not ported yet.
Co-authored-by: Hirohito Higashi <h.east.727@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions