changeset 2650:ef3a3ec8940c v7.3.070

updated for version 7.3.070 Problem: Can set environment variables in the sandbox, could be abused. Solution: Disallow it.
author Bram Moolenaar <bram@vim.org>
date Thu, 02 Dec 2010 14:48:14 +0100
parents b2789846ed39
children b254cfdd7405
files src/eval.c src/version.c
diffstat 2 files changed, 3 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/eval.c
+++ b/src/eval.c
@@ -2326,7 +2326,7 @@ ex_let_one(arg, tv, copy, endchars, op)
 	    else if (endchars != NULL
 			     && vim_strchr(endchars, *skipwhite(arg)) == NULL)
 		EMSG(_(e_letunexp));
-	    else
+	    else if (!check_secure())
 	    {
 		c1 = name[len];
 		name[len] = NUL;
--- a/src/version.c
+++ b/src/version.c
@@ -715,6 +715,8 @@ static char *(features[]) =
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    70,
+/**/
     69,
 /**/
     68,