The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 |
From: Ben Schmidt <mail_ben_schm...@yahoo.com.au>
Date: Wed, 20 Aug 2008 13:38:27 +1000
Local: Tues, Aug 19 2008 11:38 pm
Subject: Bug with v_K and potentially K command
Ex command substitutions (:help cmdline-special) seem to be done on the keyword
when using the K command. Due to normal settings for iskeyword this won't usually show up for K, but will for {Visual}K if you, e.g., highlight a URL with a # in it and use K on it (with keywordprg set to 'firefox' or something--'open' for me on Mac OS X--this makes sense: in fact it is very useful). If there is no alternate file you get an error in Vim, but if there is one, nonsense just gets passed to the shell. It should be checked that the keyword is properly shell-escaped, too. I can't quickly think of a way to easily exploit this one, so I don't think it's a security risk, but it's definitely a bug. Ben. You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||