SciTE 5.6.4 released

[Neil Hodgson]

SciTE 5.6.4 is now available from the scintilla.org web site. It uses Lexilla 5.5.1 and Scintilla 5.6.4.

This is a security and performance release.

The most prominent change is a set of properties that limit the damage that can be done by malicious Lua scripts. These changes are for scenarios where projects are downloaded from public code sharing sites like GitHub and may have been infected with malicious scripts and settings. Many users do not use scripts so this will improve safety at little cost.

Script settings in local and directory properties are now disabled by default and can only be enabled in user or global properties. The property allow.local.script may be set to 1 in user properties to enable commands that would load Lua scripts. For script lexers, the property allow.script.lexer should also be set to 1 in user properties.

To disable local properties completely, set properties.local.enable=0 in user properties.

There were improvements for Baan, HTML, and XML.

A C++20 compiler is needed to build SciTE.

A detailed list of changes is available on the history page.
https://www.scintilla.org/SciTEHistory.html

SciTE uses Mercurial (Hg) and Git for source code control. The repositories can be cloned with
git clone https://github.com/ScintillaOrg/lexilla
hg clone http://hg.code.sf.net/p/scintilla/code
hg clone http://hg.code.sf.net/p/scintilla/scite

Downloads:
https://www.scintilla.org/SciTEDownload.html

There will be a commercial macOS release of SciTE shortly.

Thanks to the contributors of code and documentation and to the testers.

Neil