Fix Neovim error notification Lua injection

phillco · phillco · commit 023cfa1d7f91 · 2026-05-19T17:38:16.000-07:00
diff --git a/packages/lib-neovim-common/src/neovimApi.ts b/packages/lib-neovim-common/src/neovimApi.ts
@@ -164,6 +164,6 @@ export async function showErrorMessage(
   client: NeovimClient,
   message: string,
 ): Promise<void> {
-  const luaCode = `vim.notify("${message}")`;
-  await client.executeLua(luaCode, []);
+  const luaCode = "vim.notify(...)";
+  await client.executeLua(luaCode, [message]);
 }

Original file line number	Diff line number	Diff line change
`@@ -164,6 +164,6 @@ export async function showErrorMessage(`
`164`	`164`	`client: NeovimClient,`
`165`	`165`	`message: string,`
`166`	`166`	`): Promise<void> {`
`167`		- const luaCode = `vim.notify("${message}")`;
`168`		`- await client.executeLua(luaCode, []);`
	`167`	`+ const luaCode = "vim.notify(...)";`
	`168`	`+ await client.executeLua(luaCode, [message]);`
`169`	`169`	`}`