Christian Brabandt 405e2fb6d5 patch 9.2.0383: [security]: runtime(netrw): shell-injection via sftp: and file: URLs ...

Problem:  runtime(netrw): shell-injection via sftp: and file: URLs
          (Joshua Rogers)
Solution: Escape temporary file names, harden filename suffix regex,
          drop unused g:netrw_tmpfile_escape variable

Supported by AI

Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-04-21 19:08:05 +00:00

..

cfilter/plugin

…

comment

runtime(comment): add <Plug>-mappings

2025-06-22 20:20:34 +02:00

dvorak

…

editexisting/plugin

…

editorconfig

Drop superfluous execute permissions for readable files

2025-10-30 19:05:03 +00:00

helpcurwin

runtime(helpcurwin): fix E121 error

2026-01-28 21:45:50 +00:00

helptoc

Fix incorrect spelling of Vim script and Vim9 script

2025-10-17 17:50:29 +00:00

hlyank/plugin

runtime(hlyank): verify winid in lambda before matchdelete()

2026-04-11 14:53:48 +00:00

justify/plugin

…

matchit

runtime(matchit): include minor improvement from chrisbra/matchit

2026-01-13 19:40:40 +00:00

netrw

patch 9.2.0383: [security]: runtime(netrw): shell-injection via sftp: and file: URLs

2026-04-21 19:08:05 +00:00

nohlsearch/plugin

runtime(nohlsearch): fix CursorHold loop

2025-03-08 17:16:18 +01:00

osc52

runtime(osc52): Omit paste from the osc52 provider when g:osc52_disable_paste is enabled

2026-03-01 19:23:34 +00:00

shellmenu/plugin

…

swapmouse/plugin

…

termdebug/plugin

patch 9.2.0143: termdebug: no support for thread and condition in :Break

2026-03-12 18:34:37 +00:00