Junegunn Choi d4a70c8314 Do not run arbitrary Ex commands from tag addresses ...

A tags file can come from an untrusted source, and its address field can hold any
Ex command, which :Tags, :BTags and their CTRL-O Show callback ran as is.

- Take only a line number or a search pattern, chained with ';' for
  '--excmd=combine' and cut at the ';"' terminator as Vim's find_extra() does. A
  pattern can be left unterminated, which takes any '|' or ';' into the pattern,
  so it cannot chain a command either. Anything else is refused by name
- Run the address in a sandbox, as builtin tag jumps do since Vim 6.0. ':sandbox'
  as a modifier stops at the first '|', so the address goes to ':execute', which
  keeps all of it inside
- :BTags gains the search settings and the per-entry recovery the other two
  paths already had, so one failing address no longer drops the rest

Close #1626

2026-09-28 21:55:13 +09:00

..

vim

Add ctrl-o to show the entry without closing fzf (#1621)

2026-09-06 10:26:02 +09:00

vim.vim

Do not run arbitrary Ex commands from tag addresses

2026-09-28 21:55:13 +09:00