From: Christian Brabandt <cb@256bit.org>
Date: Tue, 31 Mar 2026 15:04:48 +0000 (+0000)
Subject: runtime(tera): use fnameescape() when loading separate syntax files
X-Git-Tag: v9.2.0273~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e551e71d7e47c233d55272162bc3e9160bc9d102;p=thirdparty%2Fvim.git

runtime(tera): use fnameescape() when loading separate syntax files

Signed-off-by: Christian Brabandt <cb@256bit.org>
---

diff --git a/runtime/syntax/tera.vim b/runtime/syntax/tera.vim
index 90cf5171eb..e151e8674b 100644
--- a/runtime/syntax/tera.vim
+++ b/runtime/syntax/tera.vim
@@ -2,6 +2,7 @@
 " Language:	Tera
 " Maintainer:	Muntasir Mahmud <muntasir.joypurhat@gmail.com>
 " Last Change:	2026 Jan 29
+" 2026 Mar 31 by Vim project: prevent code execution in filename
 
 if exists("b:current_syntax")
   finish
@@ -22,7 +23,7 @@ endif
 
 " Load the underlying language syntax if detected
 if s:underlying_filetype != ""
-  execute "runtime! syntax/" . s:underlying_filetype . ".vim"
+  execute "runtime! syntax/" . fnameescape(s:underlying_filetype) . ".vim"
   unlet! b:current_syntax
 else
   " Default to HTML if no specific language detected