q1uf3ng 351a16c88f runtime(zip): also block single leading slash and absolute paths in Extract ...

zip#Write(): the Windows path check did not match a single leading
slash (/path), which resolves to the current drive root on Windows.
Simplify the regex to match any leading slash or backslash.

zip#Extract(): add absolute path checks for both Unix and Windows,
matching the existing checks in zip#Write().

closes: #19976

Signed-off-by: q1uf3ng <glna9@protonmail.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-04-15 04:03:02 +00:00

..

autoload

runtime(zip): also block single leading slash and absolute paths in Extract

2026-04-15 04:03:02 +00:00

bitmaps

…

colors

runtime(colors): improve catppuccin colorscheme

2026-01-31 16:08:51 +00:00

compiler

patch 9.2.0225: runtime(compiler): No compiler plugin for just

2026-03-22 16:46:41 +00:00

doc

patch 9.2.0350: Enabling modelines poses a risk

2026-04-14 18:57:41 +00:00

ftplugin

runtime(racket): Make visual K mapping more robust for shell injection

2026-04-01 08:10:15 +00:00

icons

…

import/dist

…

indent

runtime(handlebars): adds handlebars template syntax & indent support

2026-03-05 20:06:02 +00:00

keymap

runtime: convert *_utf-8.vim files to actual UTF-8 encoding

2026-01-25 15:58:33 +00:00

lang

translation(zh): Update menu translation for changed "Sponsor" entry

2026-02-18 22:24:14 +00:00

macros

runtime(less.sh): Fix reading from stdin.

2026-02-18 22:28:21 +00:00

pack/dist/opt

runtime(hlyank): verify winid in lambda before matchdelete()

2026-04-11 14:53:48 +00:00

plugin

runtime(manpager): use \x07 instead of \a for BEL in OSC 8 regex

2026-03-24 19:48:44 +00:00

print

…

spell

runtime: Revert several "mark invalid contact addresses" commits

2026-01-01 15:14:14 +00:00

syntax

patch 9.2.0350: Enabling modelines poses a risk

2026-04-14 18:57:41 +00:00

tools

runtime(preproc_indent): Ignore Swapfiles when loading buffers

2026-04-02 17:53:30 +00:00

tutor

translation(ru): Update Russian translation and fix typos in tutor

2026-02-07 22:00:32 +00:00

bugreport.vim

…

defaults.vim

runtime(defaults): Update comment for reverting C comment strings

2025-11-28 20:25:41 +00:00

delmenu.vim

…

doc.info

…

evim.vim

…

filetype.vim

patch 9.2.0333: filetype: PklProject files are not recognized

2026-04-10 18:40:37 +00:00

ftoff.vim

…

ftplugin.vim

…

ftplugof.vim

…

gvim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

gvimrc_example.vim

…

hi16-action-make.png

…

hi22-action-make.png

…

icons.info

…

indent.vim

…

indoff.vim

…

macmap.vim

…

macros.info

…

makemenu.vim

…

menu.vim

runtime(menu): fix space before Tab and trailing space

2026-01-19 19:04:47 +00:00

mswin.vim

…

optwin.vim

patch 9.2.0350: Enabling modelines poses a risk

2026-04-14 18:57:41 +00:00

scripts.vim

…

synmenu.vim

…

termcap

…

tools.info

…

tutor.info

…

vim16x16_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim16x16.gif

…

vim16x16.png

…

vim16x16.xpm

…

vim32x32_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim32x32.gif

…

vim32x32.png

…

vim32x32.xpm

…

vim48x48_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim48x48.gif

…

vim48x48.png

…

vim48x48.xpm

…

vim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

vimlogo.cdr

…

vimlogo.eps

…

vimlogo.gif

…

vimlogo.pdf

…

vimlogo.svg

…

vimlogo.xpm

…

vimrc_example.vim

…

xdg.vim

runtime(xdg): Move viminfofile storage to state dir

2026-02-19 12:24:53 +01:00