commit d4ddfafc2ac07d37a8c851ceb453f8872a0840ef
author Bram Moolenaar <Bram@vim.org> Thu Dec 02 14:48:14 2010 +0100
committer Bram Moolenaar <Bram@vim.org> Thu Dec 02 14:48:14 2010 +0100
tree dbafd0f337ffca80b3e66cddd924ac781b5d633f
parent df6b11e95593b5c2ff7690645ffbbb0702ca1c9f

updated for version 7.3.070
Problem:    Can set environment variables in the sandbox, could be abused.
Solution:   Disallow it.

src/eval.c

diff --git a/src/eval.c b/src/eval.c
index 7c3abf1..3564617 100644
--- a/src/eval.c
+++ b/src/eval.c
@@ -2326,7 +2326,7 @@
 	    else if (endchars != NULL
 			     && vim_strchr(endchars, *skipwhite(arg)) == NULL)
 		EMSG(_(e_letunexp));
-	    else
+	    else if (!check_secure())
 	    {
 		c1 = name[len];
 		name[len] = NUL;

src/version.c

diff --git a/src/version.c b/src/version.c
index 3dfb975..5d96698 100644
--- a/src/version.c
+++ b/src/version.c
@@ -715,6 +715,8 @@
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    70,
+/**/
     69,
 /**/
     68,