diff options
| author | Frank LENORMAND <lenormf@gmail.com> | 2020-09-16 11:37:01 +0300 |
|---|---|---|
| committer | Frank LENORMAND <lenormf@gmail.com> | 2020-09-18 09:01:32 +0300 |
| commit | 6976b1dce45e89fa55b80f9ba5a92b23ffb7ad15 (patch) | |
| tree | 333873a27c14186fb52186f31b879148bf60bac4 /rc/tools/python | |
| parent | dbd7e4da79ff59a63be03c580d3f396657199596 (diff) | |
rc modeline: Prevent command execution
This commit prevents specially crafted modelines from making the
editor execute arbitrary Kakoune commands.
By using a tabulation character as a separator, commands can be
injected in the value of the options listed in the modeline. For
example:
# kak: tabstop=2;set-option buffer pwned yes
Fixes #3735.
Diffstat (limited to 'rc/tools/python')
0 files changed, 0 insertions, 0 deletions