nvim-lua/wishlist

Secure Modelines

Open

#27 创建于 2021年7月24日

在 GitHub 查看
 (1 评论) (0 反应) (0 负责人) (0 fork)github user discovery
help wantedidea

仓库指标

Star
 (249 star)
PR 合并指标
 (PR 指标待抓取)

描述

What? Once in a while, modelines appear in articles about security issues. Vim has a plugin called securemodelines to avoid these issues.

Why? The plugin should only use some options in modelines, those that do not bring any risk to our systems. It uses a variable called "secure_modelines_allowed_items".

Potential existing implementations: There is at least one vim version of secure modelines tlvince/securemodelines

Potential pitfalls: I never have developed any vim plugin, now with many Lua plugins coming out I intend to study the help the community

贡献者指南