patch 8.1.0433: mapping can obtain text from inputsecret()
Problem: Mapping can obtain text from inputsecret(). (Tommy Allen)
Solution: Disallow CTRL-R = and CTRL-\ e when using inputsecret().
diff --git a/src/ex_getln.c b/src/ex_getln.c
index c2c7453..f08ae90 100644
--- a/src/ex_getln.c
+++ b/src/ex_getln.c
@@ -1308,7 +1308,11 @@
/* CTRL-\ e doesn't work when obtaining an expression, unless it
* is in a mapping. */
if (c != Ctrl_N && c != Ctrl_G && (c != 'e'
- || (ccline.cmdfirstc == '=' && KeyTyped)))
+ || (ccline.cmdfirstc == '=' && KeyTyped)
+#ifdef FEAT_EVAL
+ || cmdline_star
+#endif
+ ))
{
vungetc(c);
c = Ctrl_BSL;
@@ -1801,7 +1805,8 @@
new_cmdpos = -1;
if (c == '=')
{
- if (ccline.cmdfirstc == '=')/* can't do this recursively */
+ if (ccline.cmdfirstc == '=' // can't do this recursively
+ || cmdline_star) // or when typing a password
{
beep_flush();
c = ESC;