| commit | d4ddfafc2ac07d37a8c851ceb453f8872a0840ef | [log] [tgz] |
|---|---|---|
| author | Bram Moolenaar <Bram@vim.org> | Thu Dec 02 14:48:14 2010 +0100 |
| committer | Bram Moolenaar <Bram@vim.org> | Thu Dec 02 14:48:14 2010 +0100 |
| tree | dbafd0f337ffca80b3e66cddd924ac781b5d633f | |
| parent | df6b11e95593b5c2ff7690645ffbbb0702ca1c9f [diff] [blame] |
updated for version 7.3.070 Problem: Can set environment variables in the sandbox, could be abused. Solution: Disallow it.
diff --git a/src/eval.c b/src/eval.c index 7c3abf1..3564617 100644 --- a/src/eval.c +++ b/src/eval.c
@@ -2326,7 +2326,7 @@ else if (endchars != NULL && vim_strchr(endchars, *skipwhite(arg)) == NULL) EMSG(_(e_letunexp)); - else + else if (!check_secure()) { c1 = name[len]; name[len] = NUL;