neovim

0 Fork 0

mirror of https://github.com/neovim/neovim.git synced 2026-11-02 20:30:40 -06:00

Files

T

zeertzjqandYasuhiro Matsumoto c4ce10930c vim-patch:9.2.0663: [security]: runtime(netrw): code injection in local file deletion

Problem:  [security]: s:NetrwLocalRmFile() escapes only the backslash in
          the file name before passing it to :execute, so a name
          containing "|" injects arbitrary Ex commands when the file is
          deleted (cipher-creator)
Solution: Use fnameescape() to correctly escape the file name
          (Yasuhiro Matsumoto).

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh

Supported by AI

https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2

Co-authored-by: Yasuhiro Matsumoto <mattn.jp@gmail.com>

2026-06-17 15:22:04 +08:00

benchmark

test: add benchmark for drawing many non-wrapped virt lines (#40143 )

2026-06-08 22:14:22 +08:00

client

test: run Lua harness with nvim -l

2026-05-13 13:14:07 +01:00

cmakeconfig

test: fix some type warnings (#37483 )

2026-01-21 15:11:47 +08:00

functional

fix(path): open swapfile when using device path #39982