letter bombs: enable-local-eval saves Emacs 19

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Robert M. Haas: "Re: Got this - not sure of authenticity. Better safe etc..."
• Previous message: John C. Orthoefer: "Re: Solaris ff.core and wsinfo commands."
• In reply to: Rens Troost: "Re: Virus's -- This is an Emacs bomb"
• Next in thread: Michael Bresnahan: "Re: letter bombs: enable-local-eval saves Emacs 19"

Several people have wondered on this list why enable-local-variables
is set to T by default in GNU Emacs 19.  It's not as bad as you think.
There is another variable, enable-local-eval, that determines whether
risky actions should be taken.  This is NOT set to T by default.
These settings provide a compromise, allowing the convenience of not
being asked about harmless actions such as using "put" or setting
"time-stamp-format" in local variables, while not allowing dangerous
actions such as setting find-file-hooks (which this bomb tries to do).

So, to summarize, with the default settings Emacs 19 is NOT caught by
this sample bomb.

 < Stephen
   X Consortium

• Next message: Robert M. Haas: "Re: Got this - not sure of authenticity. Better safe etc..."
• Previous message: John C. Orthoefer: "Re: Solaris ff.core and wsinfo commands."
• In reply to: Rens Troost: "Re: Virus's -- This is an Emacs bomb"
• Next in thread: Michael Bresnahan: "Re: letter bombs: enable-local-eval saves Emacs 19"