mirrors
/
nano
mirror of git://git.sv.gnu.org/nano.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

files: with --rectrict, prevent invoking the browser and toggling backups 

Prevent also the toggling of Append and Prepend.  All four functions
should not be available in restricted mode, and are absent from the
WriteOut menu in that mode, but using {browser}, {backup}, {append}
or {prepend} in a string bind allowed to bypass the menu checks.

This fixes https://savannah.gnu.org/bugs/?65819.

Problem existed since version 7.0, since braced function names
were introduced.
This commit is contained in:
Benno Schulenberg 2024-06-01 11:08:48 +02:00
parent ea07eb6aa3
commit 689748843c
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/files.c
View File

@ -2196,7 +2196,7 @@ int write_it_out(bool exiting, bool withprompt)
given = mallocstrcpy(given, answer);
#ifdef ENABLE_BROWSER
if (function == to_files) {
if (function == to_files && !ISSET(RESTRICTED)) {
char *chosen = browse_in(answer);
if (chosen == NULL)
@ -2213,10 +2213,10 @@ int write_it_out(bool exiting, bool withprompt)
} else if (function == mac_format) {
openfile->fmt = (openfile->fmt == MAC_FILE) ? NIX_FILE : MAC_FILE;
continue;
} else if (function == back_it_up) {
} else if (function == back_it_up && !ISSET(RESTRICTED)) {
TOGGLE(MAKE_BACKUP);
continue;
} else if (function == prepend_it || function == append_it) {
} else if ((function == prepend_it || function == append_it) && !ISSET(RESTRICTED)) {
if (function == prepend_it)
method = (method == PREPEND) ? OVERWRITE : PREPEND;
else