Merge pull request #19388 from neovim/backport-19387-to-release-0.7

[Backport release-0.7] fix(ex_cmds): correct flags for :const

src/nvim/ex_cmds.lua

@@ -629,7 +629,7 @@ module.cmds = {
   },
   {
     command='const',
-    flags=bit.bor(NEEDARG, EXTRA, NOTRLCOM, CMDWIN),
+    flags=bit.bor(EXTRA, NOTRLCOM, SBOXOK, CMDWIN),
     addr_type='ADDR_NONE',
     func='ex_const',
   },

test/functional/vimscript/let_spec.lua

@@ -5,6 +5,7 @@ local clear = helpers.clear
 local command = helpers.command
 local eval = helpers.eval
 local meths = helpers.meths
+local exec = helpers.exec
 local exec_capture = helpers.exec_capture
 local source = helpers.source
 local testprg = helpers.testprg
@@ -91,3 +92,19 @@ describe(':let', function()
     eq(1, eval('1'))
   end)
 end)
+
+describe(':let and :const', function()
+  it('have the same output when called without arguments', function()
+    eq(exec_capture('let'), exec_capture('const'))
+  end)
+
+  it('can be used in sandbox', function()
+    exec([[
+      func Func()
+        let l:foo = 'foo'
+        const l:bar = 'bar'
+      endfunc
+      sandbox call Func()
+    ]])
+  end)
+end)