[vim/vim] patch 9.0.$version: buf_copy_options() can lose the P_INSECURE flag (PR #20861)

Christian Brabandt (Vim Github Repository) <[email protected]> Tue, 28 Jul 2026 08:46:54 -0700
Newsgroups gmane.editors.vim.devel
Message-ID <vim/vim/pull/[email protected]>
Problem:  An insecurely-set 'indentexpr', 'formatexpr', 'includeexpr'
          or 'complete' value can end up evaluated outside the
          sandbox after buf_copy_options() and clears the flag.
Solution: Copy the insecure flag alongside the value in
          buf_copy_options(), and make 'complete' a per-buffer
          insecure-flags field

Supported by AI.

closes: #PR
You can view, comment on, or merge this pull request online at:

  https://github.com/vim/vim/pull/20861

-- Commit Summary --

  * patch 9.0.$version: buf_copy_options() can lose the P_INSECURE flag

-- File Changes --

    M src/option.c (10)
    M src/structs.h (1)
    M src/testdir/test_options.vim (118)

-- Patch Links --

https://github.com/vim/vim/pull/20861.patch
https://github.com/vim/vim/pull/20861.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/vim/vim/pull/20861
You are receiving this because you are subscribed to this thread.

Message ID: <vim/vim/pull/[email protected]>

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups "vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/vim_dev/vim/vim/pull/20861%40github.com.