From 11cd8c55f0d36224ac8e12c3259012d502b6213a Mon Sep 17 00:00:00 2001
From: ozone10 <positronix10@gmail.com>
Date: Fri, 27 Jun 2025 17:12:18 +0200
Subject: [PATCH] Improve security for DLL loading

Use "/DEPENDENTLOADFLAG:0x800" to limite module search path to the %windows%\system32 directory.

Fix #13964, close #16762
---
 PowerEditor/visual.net/notepadPlus.Cpp.props | 1 +
 1 file changed, 1 insertion(+)

diff --git a/PowerEditor/visual.net/notepadPlus.Cpp.props b/PowerEditor/visual.net/notepadPlus.Cpp.props
index dffcc7dbc..2d236e757 100644
--- a/PowerEditor/visual.net/notepadPlus.Cpp.props
+++ b/PowerEditor/visual.net/notepadPlus.Cpp.props
@@ -50,6 +50,7 @@
       <GenerateDebugInformation>true</GenerateDebugInformation>
       <SubSystem>Windows</SubSystem>
       <AdditionalLibraryDirectories>..\..\scintilla\bin;$(IntDir);%(AdditionalLibraryDirectories)</AdditionalLibraryDirectories>
+      <AdditionalOptions>/DEPENDENTLOADFLAG:0x800 %(AdditionalOptions)</AdditionalOptions>
     </Link>
     <Manifest>
       <AdditionalManifestFiles>..\src\dpiAware.manifest;%(AdditionalManifestFiles)</AdditionalManifestFiles>