> On Mar 31, 2026, at 11:57 AM, Christian Brabandt <[email protected]> wrote: > > > On Mo, 30 Mär 2026, Demi Marie Obenour wrote: > >> Should `modeline` be disabled by default in future releases? >> It's a huge attack surface. > > Indeed, it is probably time to disable this by default: > https://github.com/vim/vim/pull/19875
I agree. The defaults should be safe. Until that's fixed, vim users should edit ~/.vimrc to add: set noshowmode That won't help the many who use the defaults, but it's a start. --- David A. Wheeler
