Commit Graph
2 Commits
Author SHA1 Message Date
zeertzjqandChristian Brabandt 61eddb3fe7 vim-patch:9.2.0523: tests: no test for using shellescape() in combination with :! (#39972)
Problem:  tests: no test for using shellescape() in combination with :!
Solution: Add a test that checks runtime files for using wrong
          combination of shellescape() with ! ex command

This has lead to a few security relevant issues, so add a test that
checks all runtime files for any ! followed by a shellescape() that does
not use the {special} arg.

related: Commit: 3fb5e58fbc63d86a3e65f1a141b0d67af2 (patch 9.2.0479:
         [security]: runtime(tar): command injection in tar plugin)

closes: vim/vim#20286

Supported by AI

https://github.com/vim/vim/commit/fccc2adc98c3d6664f1f2d8ddab17b096e647986

Co-authored-by: Christian Brabandt <cb@256bit.org>
2026-05-24 09:29:50 +08:00
Justin M. Keyes 8d3f8f639b vim-patch:46fceaaa8d14
Updated runtime files.

https://github.com/vim/vim/commit/46fceaaa8d1447a9588736d86eb4908214187b08
2017-04-29 01:47:36 +02:00