Junegunn Choi f126ff2954 fzf-tmux: validate attached layout size value ...

Attached option form (e.g. -l50) captured size via ${arg:2} with no
validation, unlike the separate-argument form. For -l/-u the value
reached $((...)) arithmetic, where a[$(cmd)] runs cmd during option
parsing, before any tmux check. Same value was also expanded unquoted
into `tmux popup ... $opt`, allowing tmux flag injection.

Apply the separate-form regex to the attached form too. Rejects the
array-subscript payload and space-bearing geometry values that enabled
flag injection.

Reported-by: sb24CK (https://github.com/sb24CK)

2026-10-11 11:27:05 +09:00

..

fzf-preview.sh

Apply shfmt to bash script files (make fmt)

2025-09-24 22:41:54 +09:00

fzf-tmux

fzf-tmux: validate attached layout size value

2026-10-11 11:27:05 +09:00