aboutsummaryrefslogtreecommitdiff
path: root/runtime/autoload/python3complete.vim
Commit message (Collapse)AuthorAge
* vim-patch:9.2.0699: [security]: possible code execution with python complete ↵zeertzjq2026-06-22
| | | | | | | | | | | | | | | | (#40363) Problem: [security]: possible code execution with python complete (morningbread) Solution: Use repr() to quote the doc strings correctly Github Security Advisory: https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3 Supported by AI https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8 Co-authored-by: Christian Brabandt <cb@256bit.org>
* vim-patch:9.2.0597: [security]: possible code execution with python complete ↵zeertzjq2026-06-05
| | | | | | | | | | | | | | | (#40117) Problem: [security]: another possible code execution with python complete (David Carliez) Solution: Strip default expressions and annotations from generated source for pythoncomplete and python3complete. Github Security Advisory: https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468 https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2 Co-authored-by: Christian Brabandt <cb@256bit.org>
* vim-patch:9.2.0568: pythoncomplete: g:pythoncomplete_allow_import had no ↵zeertzjq2026-05-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | effect (#40067) Problem: The security patch 9.2.0561 added a vim.eval() call inside Completer.evalsource() to honor g:pythoncomplete_allow_import. But the 'vim' module is only imported inside the outer vimcomplete() / vimpy3complete() function, not at the script's top level, so referring to it from a Completer method raises NameError. The surrounding bare 'except' silently swallows the error and leaves allow_imports at 0, meaning the opt-in never takes effect -- 'import os' (and any other buffer-level import) is always skipped, no candidates are produced for 'os.<...>' and Test_popup_and_preview_autocommand() fails on the Windows CI matrix (Linux skips the test because Python 2 is absent). Solution: Re-import 'vim' at the top of evalsource() in both pythoncomplete.vim and python3complete.vim so the eval reads the global, and set g:pythoncomplete_allow_import = 1 in the test (it is the opt-in intended for callers that trust the buffer contents) (thinca). closes: vim/vim#20386 https://github.com/vim/vim/commit/868ad62cb8bf8038322eab2badd31bd98b02b9df Co-authored-by: thinca <thinca@gmail.com>
* vim-patch:9.2.0561: [security]: possible code execution with python3completezeertzjq2026-05-30
| | | | | | | | | | | | Problem: [security]: possible code execution with python3complete Solution: Disable execution of import/from statements Github Security Advisory: https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d Co-authored-by: Christian Brabandt <cb@256bit.org>
* vim-patch:27630b2: runtime(python3complete): remove trailing white spacezeertzjq2026-02-08
| | | | | | | | related: vim/vim#19354 https://github.com/vim/vim/commit/27630b28ad70fd97466e324f741f90ca3ef2536a Co-authored-by: Mao-Yining <mao.yining@outlook.com>
* vim-patch:46eea444d (#17920)dundargoc2022-03-30
| | | | | | Update runtime files https://github.com/vim/vim/commit/46eea444d992c2ae985cabb775a5d283f8e16df3 Skip repeat.txt as it only has vim9-specific changes.
* vim-patch:6c391a74fe90 (#15654)Christian Clason2021-09-13
| | | | | | | | | | | Update runtime files https://github.com/vim/vim/commit/6c391a74fe90190796ca0b0c010112948a6e75d7 omit autoload/getscript.vim skip doc/eval.txt (needs 8.2.2468) skip doc/various.txt (needs 8.2.3400) (typofixes courtesy of @dundargoc)
* vim-patch:4f4d51a942ccJan Edmund Lazo2021-05-01
| | | | | | | | Update runtime files. https://github.com/vim/vim/commit/4f4d51a942cc2c6b3e936ee0f93f00c2d000065c Omit "??" operator. Patches v8.2.1794,v8.2.1798 are not ported yet.
* doc [ci skip] #10383Justin M. Keyes2019-07-19
| | | | - test/README.md: document luassert `TableFormatLevel` - CONTRIBUTING.md: absorb parts of the old "Development tips" wiki page
* vim-patch:ca63501David Barnett2016-04-18
| | | | | | Update various runtime files. https://github.com/vim/vim/commit/ca63501fbcd1cf9c8aa9ff12c093c95b62a89ed7
* re-integrate runtime/ vim-patch:0 #938Justin M. Keyes2014-07-29
Vim runtime files based on 7.4.384 / hg changeset 7090d7f160f7 Excluding: Amiga icons (*.info, icons/) doc/hangulin.txt tutor/ spell/ lang/ (only used for menu translations) macros/maze/, macros/hanoi/, macros/life/, macros/urm/ These were used to test vi compatibility. termcap "Demonstration of a termcap file (for the Amiga and Archimedes)" Helped-by: Rich Wareham <rjw57@cam.ac.uk> Helped-by: John <john.schmidt.h@gmail.com> Helped-by: Yann <yann@yann-salaun.com> Helped-by: Christophe Badoit <c.badoit@lesiteimmo.com> Helped-by: drasill <github@tof2k.com> Helped-by: Tae Sandoval Murgan <taecilla@gmail.com> Helped-by: Lowe Thiderman <lowe.thiderman@gmail.com>
generated by cgit (git 2.34.1) at 2026-10-19 23:42:33 +0000