allow backticks in commands, also fix potential exploit, of user running untrusted code hidden in some source

12 years ago · 8e091d6d5e
parent 51ee1a3c6d
commit 8e091d6d5e
1 changed files with 2 additions and 2 deletions
--- a/plugin/vimux.vim
+++ b/plugin/vimux.vim
@ -38,7 +38,7 @@ function VimuxRunCommand(command, ...)
    let l:autoreturn = a:1
  endif

-  let s:_VimTmuxCmd = a:command
+  let s:_VimTmuxCmd = substitute(a:command, '`', '\\`', 'g')
  let s:_VimTmuxCmdAutoreturn = l:autoreturn

  if l:autoreturn == 1
@ -57,7 +57,7 @@ function RunVimTmuxCommand(command, ...)
    let l:autoreturn = a:1
  endif

-  let s:_VimTmuxCmd = a:command
+  let s:_VimTmuxCmd = substitute(a:command, '`', '\\`', 'g')
  let s:_VimTmuxCmdAutoreturn = l:autoreturn

  if l:autoreturn == 1