org-vim

mirror of https://github.com/vim/vim.git synced 2026-08-05 14:09:20 +02:00

Files

T

Yasuhiro Matsumoto 29c6fd090d patch 9.2.0840: [security]: code injection in netrw via bookmarks

Problem:  [security]: code injection in netrw via bookmarks and history
          (David Carliez)
Solution: Escape the '|' explicitly (Yasuhiro Matsumoto)

The bookmark and history menu builders interpolate paths into :execute'd
:menu commands using g:netrw_menu_escape, which did not escape the Ex
command separator '|'. A crafted path could break out of the :menu command
and run arbitrary Ex/shell commands when the menu was built or triggered.

Add '|' to g:netrw_menu_escape for the menu names, escape the :e right-hand
side with fnameescape(), and quote the netrw#MakeTgt() argument with
string() instead of raw single-quote interpolation.

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2

Signed-off-by: Yasuhiro Matsumoto <mattn.jp@gmail.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-07-23 19:56:55 +00:00

autoload

runtime(spellfile): xdg: Do not assume $HOME/.vim directory

2026-07-22 21:49:18 +00:00

bitmaps

…

colors

runtime(colors): update colorschemes

2026-07-22 09:54:31 +00:00

compiler

…

doc