From a2af09362633e965edfad01d973dad6d284ccc72 Mon Sep 17 00:00:00 2001
From: 10sr <8slashes+git@gmail.com>
Date: Fri, 4 Nov 2016 16:06:32 +0900
Subject: [PATCH] Add note

---
 micro/init.lua | 1 +
 1 file changed, 1 insertion(+)

diff --git a/micro/init.lua b/micro/init.lua
index 323f07c..60f3fd3 100644
--- a/micro/init.lua
+++ b/micro/init.lua
@@ -1,6 +1,7 @@
 -- ec = require("editorconfig_core")
 
 local function getProperties(fullpath)
+   -- TODO: Avoid command injection vulnerability
    local file = io.popen("editorconfig '" .. fullpath .. "'", "r")
    local output = file:read("*all")
    file:close()