updated for version 7.3.070v7.3.070v7-3-070

Problem:    Can set environment variables in the sandbox, could be abused.
Solution:   Disallow it.

2 files changed, 3 insertions, 1 deletions

diff --git a/src/eval.c b/src/eval.c
index 7c3abf1f..35646174 100644
--- a/src/eval.c
+++ b/src/eval.c
@@ -2326,7 +2326,7 @@ ex_let_one(arg, tv, copy, endchars, op)
 	    else if (endchars != NULL
 			     && vim_strchr(endchars, *skipwhite(arg)) == NULL)
 		EMSG(_(e_letunexp));
-	    else
+	    else if (!check_secure())
 	    {
 		c1 = name[len];
 		name[len] = NUL;
diff --git a/src/version.c b/src/version.c
index 3dfb975d..5d96698a 100644
--- a/src/version.c
+++ b/src/version.c
@@ -715,6 +715,8 @@ static char *(features[]) =
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    70,
+/**/
     69,
 /**/
     68,