search

ciaranm / securemodelines

A secure alternative to Vim modelines
107 stars 29 forks source link

explain what's so insecure about vim modelines #3

Closed Dieterbe closed 13 years ago

Dieterbe commented 13 years ago

it's not clear what this plugin does or why anyone would need it. What's wrong with vim modelines?

ciaranm commented 13 years ago

They allow malicious files to set all kinds of nasty options that can at the very least make your editor unusable.

Dieterbe commented 13 years ago

wicked. something to put in your README I'ld say.

meonkeys commented 5 years ago

Example: https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md