From dcfbf82a38a068e011f3441b5021eac0c37d0b54 Mon Sep 17 00:00:00 2001
From: xirvik <community@xirvik.net>
Date: Tue, 18 Aug 2026 04:51:49 +0000
Subject: [PATCH] Mark view.list and the system.time getters as untrusted safe.

Read-only getters a client needs to list views and make sense of timestamps.
---
 src/command_local.cc | 3 +++
 src/command_ui.cc    | 1 +
 2 files changed, 4 insertions(+)

diff --git a/src/command_local.cc b/src/command_local.cc
index 96ade552..c1f320d7 100644
--- a/src/command_local.cc
+++ b/src/command_local.cc
@@ -361,6 +361,9 @@ initialize_command_local() {
   rpc::rpc.mark_safe("system.api_version");
   rpc::rpc.mark_safe("system.client_version");
   rpc::rpc.mark_safe("system.library_version");
+  rpc::rpc.mark_safe("system.time");
+  rpc::rpc.mark_safe("system.time_seconds");
+  rpc::rpc.mark_safe("system.time_usec");
   rpc::rpc.mark_safe("system.file.max_size");
   rpc::rpc.mark_safe("system.file.split_size");
   rpc::rpc.mark_safe("system.file.split_suffix");
diff --git a/src/command_ui.cc b/src/command_ui.cc
index 2658e00c..6e0bd8c8 100644
--- a/src/command_ui.cc
+++ b/src/command_ui.cc
@@ -922,6 +922,7 @@ initialize_command_ui() {
 
   rpc::rpc.mark_safe("view.set_visible");
   rpc::rpc.mark_safe("view.set_not_visible");
+  rpc::rpc.mark_safe("view.list");
 
   rpc::rpc.mark_safe("cat");
   rpc::rpc.mark_safe("if");