From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: The `risky-local-variable' blacklist Date: Thu, 02 Sep 2004 00:53:20 -0400 Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Message-ID: References: Reply-To: rms@gnu.org NNTP-Posting-Host: deer.gmane.org X-Trace: sea.gmane.org 1094100842 30705 80.91.224.253 (2 Sep 2004 04:54:02 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 2 Sep 2004 04:54:02 +0000 (UTC) Cc: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Sep 02 06:53:56 2004 Return-path: Original-Received: from lists.gnu.org ([199.232.76.165]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1C2jbf-0003US-00 for ; Thu, 02 Sep 2004 06:53:56 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1C2jgc-0001V2-Ui for ged-emacs-devel@m.gmane.org; Thu, 02 Sep 2004 00:59:03 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33) id 1C2jgW-0001Ut-CJ for emacs-devel@gnu.org; Thu, 02 Sep 2004 00:58:56 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33) id 1C2jgV-0001Uh-T7 for emacs-devel@gnu.org; Thu, 02 Sep 2004 00:58:56 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1C2jgV-0001UX-R9 for emacs-devel@gnu.org; Thu, 02 Sep 2004 00:58:55 -0400 Original-Received: from [199.232.76.164] (helo=fencepost.gnu.org) by monty-python.gnu.org with esmtp (Exim 4.34) id 1C2jb8-0000Mp-DS for emacs-devel@gnu.org; Thu, 02 Sep 2004 00:53:22 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.34) id 1C2jb6-0002EV-L0; Thu, 02 Sep 2004 00:53:21 -0400 Original-To: storm@cua.dk (Kim F. Storm) In-reply-to: (storm@cua.dk) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: main.gmane.org gmane.emacs.devel:26714 X-Report-Spam: http://spam.gmane.org/gmane.emacs.devel:26714 Quoting from NEWS, we already added the foundation for this: ** The variable `safe-local-eval-forms' specifies a list of forms that are ok to evaluate when they appear in an `eval' local variables specification. Normally Emacs asks for confirmation before evaluating such a form, but if the form appears in this list, no confirmation is needed. I think I wouldn't use the same variable, simply because setting a variable isn't an "eval form". Yes, we could look for (setq VAR VAL) in that list, but it seems unclean as a user interface. IIRC, we discussed back then whether to give the user a choice to automatically add an eval form to that list when prompted to confirm. But it was rejected/postponed due to lack of interest. Eval forms are used only rarely; for them, such a feature isn't needed. But if we make every file variable setting check such a list, that is much more common, so I believe such an interface is needed. BTW, shouldn't safe-local-eval-forms be marked risky ??? Not necessary, its name automatically implies "risky".