]> git.ipfire.org Git - thirdparty/vim.git/commit
patch 9.2.0523: tests: no test for using shellescape() in combination with :! v9.2.0523
authorChristian Brabandt <cb@256bit.org>
Sat, 23 May 2026 19:05:28 +0000 (19:05 +0000)
committerChristian Brabandt <cb@256bit.org>
Sat, 23 May 2026 19:05:28 +0000 (19:05 +0000)
commitfccc2adc98c3d6664f1f2d8ddab17b096e647986
tree588bedbe45a5b805855e3036ab5be5ec9f59b8a6
parentda1f41d5d33152d7ab90a817bd99803c5727b937
patch 9.2.0523: tests: no test for using shellescape() in combination with :!

Problem:  tests: no test for using shellescape() in combination with :!
Solution: Add a test that checks runtime files for using wrong
          combination of shellescape() with ! ex command

This has lead to a few security relevant issues, so add a test that
checks all runtime files for any ! followed by a shellescape() that does
not use the {special} arg.

related: Commit: 3fb5e58fbc63d86a3e65f1a141b0d67af2 (patch 9.2.0479:
         [security]: runtime(tar): command injection in tar plugin)

closes: #20286

Supported by AI

Signed-off-by: Christian Brabandt <cb@256bit.org>
src/testdir/test_codestyle.vim
src/version.c