Post #2146679

Vim has recently added the modelinestrict option to restrict modelines to a small allowlist. This is much like https://github.com/ciaranm/securemodelines (which works back to Vim 7), but built-in. It's a big improvement in security for those who want to set an option or two (I use it for spelllang) but want to reduce the risk of a vulnerability.