updated for version 7.3.070

Problem:    Can set environment variables in the sandbox, could be abused.
Solution:   Disallow it.

diff --git a/src/eval.c b/src/eval.c
index 7c3abf1f57be355454c92847f2f4b3bdb84efd2e..356461742bb9a998e32be06ccf9d9ef22d6e82e2 100644 (file)
--- a/src/eval.c
+++ b/src/eval.c
@@ -2326,7 +2326,7 @@ ex_let_one(arg, tv, copy, endchars, op)
            else if (endchars != NULL
                             && vim_strchr(endchars, *skipwhite(arg)) == NULL)
                EMSG(_(e_letunexp));
-           else
+           else if (!check_secure())
            {
                c1 = name[len];
                name[len] = NUL;

diff --git a/src/version.c b/src/version.c
index 3dfb975deb12ddef4c8918f288f6066385423198..5d96698a915b00f3ab54f0d3efc1807311d55246 100644 (file)
--- a/src/version.c
+++ b/src/version.c
@@ -714,6 +714,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    70,
 /**/
     69,
 /**/