[400] in bugtraq
letter bombs: enable-local-eval saves Emacs 19
daemon@ATHENA.MIT.EDU (Stephen Gildea)
Tue Dec 6 21:15:15 1994
To: bugtraq@fc.net
In-Reply-To: Message from rens@imsi.com of 6 Dec 94 12:33:56 EST
<9412061733.AA22974@lorax.imsi.com>
Date: Tue, 06 Dec 1994 19:10:12 EST
From: Stephen Gildea <gildea@x.org>
Several people have wondered on this list why enable-local-variables
is set to T by default in GNU Emacs 19. It's not as bad as you think.
There is another variable, enable-local-eval, that determines whether
risky actions should be taken. This is NOT set to T by default.
These settings provide a compromise, allowing the convenience of not
being asked about harmless actions such as using "put" or setting
"time-stamp-format" in local variables, while not allowing dangerous
actions such as setting find-file-hooks (which this bomb tries to do).
So, to summarize, with the default settings Emacs 19 is NOT caught by
this sample bomb.
< Stephen
X Consortium
