Backport upstream commit f08ab2f4d7d2 to fix CVE-2026-47162,
a code injection vulnerability in netrw's NetrwBookHistSave()
function. The fix replaces unsafe string concatenation with
the string() function for safe quoting of directory names
when saving bookmark history. A new test file
(test_plugin_netrw.vim) is included to verify the fix.
CVE: CVE-2026-47162
Upstream patches:
- f08ab2f4d7.patch
Resolves: RHEL-186663
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
