Christian Brabandt 405e2fb6d5 patch 9.2.0383: [security]: runtime(netrw): shell-injection via sftp: and file: URLs ...

Problem:  runtime(netrw): shell-injection via sftp: and file: URLs
          (Joshua Rogers)
Solution: Escape temporary file names, harden filename suffix regex,
          drop unused g:netrw_tmpfile_escape variable

Supported by AI

Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-04-21 19:08:05 +00:00

..

autoload

patch 9.2.0371: filetype: ghostty config files are not recognized

2026-04-20 14:50:37 +00:00

bitmaps

…

colors

…

compiler

patch 9.2.0225: runtime(compiler): No compiler plugin for just

2026-03-22 16:46:41 +00:00

doc

patch 9.2.0383: [security]: runtime(netrw): shell-injection via sftp: and file: URLs

2026-04-21 19:08:05 +00:00

ftplugin

patch 9.2.0371: filetype: ghostty config files are not recognized

2026-04-20 14:50:37 +00:00

icons

…

import/dist

…

indent

runtime(handlebars): adds handlebars template syntax & indent support

2026-03-05 20:06:02 +00:00

keymap

…

lang

translation(zh): Update menu translation for changed "Sponsor" entry

2026-02-18 22:24:14 +00:00

macros

runtime(less.sh): Fix reading from stdin.

2026-02-18 22:28:21 +00:00

pack/dist/opt

patch 9.2.0383: [security]: runtime(netrw): shell-injection via sftp: and file: URLs

2026-04-21 19:08:05 +00:00

plugin

runtime(manpager): use \x07 instead of \a for BEL in OSC 8 regex

2026-03-24 19:48:44 +00:00

print

…

spell

…

syntax

patch 9.2.0382: Wayland: focus-stealing is non-working

2026-04-20 18:24:17 +00:00

tools

runtime(preproc_indent): Ignore Swapfiles when loading buffers

2026-04-02 17:53:30 +00:00

tutor

translation(ru): Update Russian translation and fix typos in tutor

2026-02-07 22:00:32 +00:00

bugreport.vim

…

defaults.vim

…

delmenu.vim

…

doc.info

…

evim.vim

…

filetype.vim

patch 9.2.0371: filetype: ghostty config files are not recognized

2026-04-20 14:50:37 +00:00

ftoff.vim

…

ftplugin.vim

…

ftplugof.vim

…

gvim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

gvimrc_example.vim

…

hi16-action-make.png

…

hi22-action-make.png

…

icons.info

…

indent.vim

…

indoff.vim

…

macmap.vim

…

macros.info

…

makemenu.vim

…

menu.vim

…

mswin.vim

…

optwin.vim

patch 9.2.0382: Wayland: focus-stealing is non-working

2026-04-20 18:24:17 +00:00

scripts.vim

…

synmenu.vim

…

termcap

…

tools.info

…

tutor.info

…

vim16x16_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim16x16.gif

…

vim16x16.png

…

vim16x16.xpm

…

vim32x32_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim32x32.gif

…

vim32x32.png

…

vim32x32.xpm

…

vim48x48_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim48x48.gif

…

vim48x48.png

…

vim48x48.xpm

…

vim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

vimlogo.cdr

…

vimlogo.eps

…

vimlogo.gif

…

vimlogo.pdf

…

vimlogo.svg

…

vimlogo.xpm

…

vimrc_example.vim

…

xdg.vim

runtime(xdg): Move viminfofile storage to state dir

2026-02-19 12:24:53 +01:00