On Thu, May 16, 2013 at 01:53:11PM +0200, Xavier de Gaye wrote:
> Note that we must add the current directory to sys.path in order to be
> able to import vim_hook. I believe this is another bug.

No, it actually isn't.  Please see CVE-2009-0316.

If there's a need for Vim to look in a specific directory for Python
modules, then a known directory (or set of directories) should be
defined and documented, similar to 'runtimepath'.  Loading from the
current working directory is just broken.

Cheers,
-- 
James
GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <[email protected]>

Attachment: signature.asc
Description: Digital signature

Raspunde prin e-mail lui