VimPlug/emmet-vim
1
0
Fork 1
mirror of https://github.com/mattn/emmet-vim.git synced 2026-03-08 06:16:45 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
Files
fbb61e7ef297ef6114b68281c19f3767a5a959ce
emmet-vim/autoload/emmet/util.vim
Yasuhiro Matsumoto fbb61e7ef2 Use shellescape() for external commands to prevent command injection 
File paths passed to system() via xxd and identify were using manual
double-quote wrapping instead of shellescape(), which could allow
command injection with specially crafted filenames.
2026-03-07 16:45:56 +09:00

13 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink