[vim/vim] patch 9.0.$version: buf_copy_options() can lose the P_INSECURE flag (PR #20861)

5 views

Skip to first unread message

Christian Brabandt

unread,

11:47 AM (9 hours ago) 11:47 AM

to vim/vim, Subscribed

Problem: An insecurely-set 'indentexpr', 'formatexpr', 'includeexpr'
or 'complete' value can end up evaluated outside the
sandbox after buf_copy_options() and clears the flag.
Solution: Copy the insecure flag alongside the value in
buf_copy_options(), and make 'complete' a per-buffer
insecure-flags field

Supported by AI.

closes: #PR

You can view, comment on, or merge this pull request online at:

https://github.com/vim/vim/pull/20861

Commit Summary

f34f9bf patch 9.0.$version: buf_copy_options() can lose the P_INSECURE flag

File Changes

(3 files)

Patch Links:

—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS and Android. Download it today!
You are receiving this because you are subscribed to this thread.

Reply all

Reply to author

Forward

0 new messages