runtime(tera): use fnameescape() when loading separate syntax files

Signed-off-by: Christian Brabandt <cb@256bit.org>

diff --git a/runtime/syntax/tera.vim b/runtime/syntax/tera.vim
index 90cf5171eb3aa53e14a880745271b9184416af2d..e151e8674b7ec4fe2273e2ae60a3f14b0672a174 100644 (file)
--- a/runtime/syntax/tera.vim
+++ b/runtime/syntax/tera.vim
@@ -2,6 +2,7 @@
 " Language:    Tera
 " Maintainer:  Muntasir Mahmud <muntasir.joypurhat@gmail.com>
 " Last Change: 2026 Jan 29
+" 2026 Mar 31 by Vim project: prevent code execution in filename
 
 if exists("b:current_syntax")
   finish
@@ -22,7 +23,7 @@ endif
 
 " Load the underlying language syntax if detected
 if s:underlying_filetype != ""
-  execute "runtime! syntax/" . s:underlying_filetype . ".vim"
+  execute "runtime! syntax/" . fnameescape(s:underlying_filetype) . ".vim"
   unlet! b:current_syntax
 else
   " Default to HTML if no specific language detected