Adding lockbindings option for disallowing lua to modify bindings at all

Author: Neko-Box-Coder

internal/action/bindings.go

@@ -262,7 +262,11 @@ func eventsEqual(e1 Event, e2 Event) bool {
 }
 
 // TryBindKeyPlug tries to bind key for the plugin without writing to bindings.json.
+// This operation can be rejected by lockbindings to prevent unexpected actions by the user.
 func TryBindKeyPlug(k, v string, overwrite bool) (bool, error) {
+	if l, ok := config.GlobalSettings["lockbindings"]; ok && l.(bool) {
+		return false, errors.New("bindings is locked by the user")
+	}
 	return TryBindKey(k, v, overwrite, false)
 }
 

internal/config/settings.go

@@ -118,6 +118,7 @@ var DefaultGlobalOnlySettings = map[string]any{
 	"helpsplit":      "hsplit",
 	"infobar":        true,
 	"keymenu":        false,
+	"lockbindings":   false,
 	"mouse":          true,
 	"multiopen":      "tab",
 	"parsecursor":    false,

runtime/help/options.md

@@ -231,6 +231,12 @@ Here are the available options:
 
     default value: `false`
 
+* `lockbindings`: disable plugins and lua scripts for binding any keys.
+   Any custom actions must be binded manually either via commands like `bind`
+   or by modifying the `bindings.json` file.
+
+    default value: `false`
+
 * `matchbrace`: show matching braces for '()', '{}', '[]' when the cursor
    is on a brace character or (if `matchbraceleft` is enabled) next to it.