From: Bram Moolenaar <Bram@vim.org>
Date: Thu, 2 Dec 2010 13:48:14 +0000 (+0100)
Subject: updated for version 7.3.070
X-Git-Tag: v7.3.070
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=d4ddfafc2ac07d37a8c851ceb453f8872a0840ef;p=vim

updated for version 7.3.070
Problem:    Can set environment variables in the sandbox, could be abused.
Solution:   Disallow it.
---

diff --git a/src/eval.c b/src/eval.c
index 7c3abf1f5..356461742 100644
--- a/src/eval.c
+++ b/src/eval.c
@@ -2326,7 +2326,7 @@ ex_let_one(arg, tv, copy, endchars, op)
 	    else if (endchars != NULL
 			     && vim_strchr(endchars, *skipwhite(arg)) == NULL)
 		EMSG(_(e_letunexp));
-	    else
+	    else if (!check_secure())
 	    {
 		c1 = name[len];
 		name[len] = NUL;
diff --git a/src/version.c b/src/version.c
index 3dfb975de..5d96698a9 100644
--- a/src/version.c
+++ b/src/version.c
@@ -714,6 +714,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    70,
 /**/
     69,
 /**/