* Instead of `risky-local-variable'
@ 2006-01-24 16:47 Richard M. Stallman
2006-02-01 0:27 ` Luc Teirlinck
0 siblings, 1 reply; 7+ messages in thread
From: Richard M. Stallman @ 2006-01-24 16:47 UTC (permalink / raw)
I'm considering a more reliable replacement for the
`risky-local-variable' mechanism. My idea is that only defcustom'ed
variables could be specified in a local variables list, and that the
:type together with the specified value would determine whether a
variable is safe.
What do people think?
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: Instead of `risky-local-variable'
2006-01-24 16:47 Instead of `risky-local-variable' Richard M. Stallman
@ 2006-02-01 0:27 ` Luc Teirlinck
2006-02-01 2:46 ` Chong Yidong
` (2 more replies)
0 siblings, 3 replies; 7+ messages in thread
From: Luc Teirlinck @ 2006-02-01 0:27 UTC (permalink / raw)
Cc: emacs-devel
Richard Stallman wrote:
I'm considering a more reliable replacement for the
`risky-local-variable' mechanism. My idea is that only defcustom'ed
variables could be specified in a local variables list, and that the
:type together with the specified value would determine whether a
variable is safe.
What do people think?
I personally think that this sounds like a pretty radical change,
supposedly "relatively shortly" before a release. Any reason why this
can not wait till after the release?
Sincerely,
Luc.
^ permalink raw reply [flat|nested] 7+ messages in thread* Re: Instead of `risky-local-variable'
2006-02-01 0:27 ` Luc Teirlinck
@ 2006-02-01 2:46 ` Chong Yidong
2006-02-02 4:14 ` Richard M. Stallman
2006-02-01 11:03 ` Kim F. Storm
2006-02-02 4:16 ` Richard M. Stallman
2 siblings, 1 reply; 7+ messages in thread
From: Chong Yidong @ 2006-02-01 2:46 UTC (permalink / raw)
> I'm considering a more reliable replacement for the
> `risky-local-variable' mechanism. My idea is that only defcustom'ed
> variables could be specified in a local variables list, and that the
> :type together with the specified value would determine whether a
> variable is safe.
This won't work for defcustoms that haven't been loaded yet.
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: Instead of `risky-local-variable'
2006-02-01 2:46 ` Chong Yidong
@ 2006-02-02 4:14 ` Richard M. Stallman
2006-02-02 4:47 ` Chong Yidong
0 siblings, 1 reply; 7+ messages in thread
From: Richard M. Stallman @ 2006-02-02 4:14 UTC (permalink / raw)
Cc: emacs-devel
> I'm considering a more reliable replacement for the
> `risky-local-variable' mechanism. My idea is that only defcustom'ed
> variables could be specified in a local variables list, and that the
> :type together with the specified value would determine whether a
> variable is safe.
This won't work for defcustoms that haven't been loaded yet.
It would probably refuse to bind the variable in such a case, but is
that really a problem in practice? A file local binding is useful
because the variable is going to do something, which means the package
that obeys it needs to be loaded.
^ permalink raw reply [flat|nested] 7+ messages in thread* Re: Instead of `risky-local-variable'
2006-02-02 4:14 ` Richard M. Stallman
@ 2006-02-02 4:47 ` Chong Yidong
0 siblings, 0 replies; 7+ messages in thread
From: Chong Yidong @ 2006-02-02 4:47 UTC (permalink / raw)
Cc: emacs-devel
"Richard M. Stallman" <rms@gnu.org> writes:
> > I'm considering a more reliable replacement for the
> > `risky-local-variable' mechanism. My idea is that only defcustom'ed
> > variables could be specified in a local variables list, and that the
> > :type together with the specified value would determine whether a
> > variable is safe.
>
> This won't work for defcustoms that haven't been loaded yet.
>
> It would probably refuse to bind the variable in such a case, but is
> that really a problem in practice? A file local binding is useful
> because the variable is going to do something, which means the package
> that obeys it needs to be loaded.
It might be a problem for variables associated with minor modes that
the user may only turn on after visiting the file.
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: Instead of `risky-local-variable'
2006-02-01 0:27 ` Luc Teirlinck
2006-02-01 2:46 ` Chong Yidong
@ 2006-02-01 11:03 ` Kim F. Storm
2006-02-02 4:16 ` Richard M. Stallman
2 siblings, 0 replies; 7+ messages in thread
From: Kim F. Storm @ 2006-02-01 11:03 UTC (permalink / raw)
Cc: rms, emacs-devel
Luc Teirlinck <teirllm@dms.auburn.edu> writes:
> Richard Stallman wrote:
>
> I'm considering a more reliable replacement for the
> `risky-local-variable' mechanism. My idea is that only defcustom'ed
> variables could be specified in a local variables list, and that the
> :type together with the specified value would determine whether a
> variable is safe.
>
> What do people think?
>
> I personally think that this sounds like a pretty radical change,
> supposedly "relatively shortly" before a release. Any reason why this
> can not wait till after the release?
I don't even want to think about this before the release!
--
Kim F. Storm <storm@cua.dk> http://www.cua.dk
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: Instead of `risky-local-variable'
2006-02-01 0:27 ` Luc Teirlinck
2006-02-01 2:46 ` Chong Yidong
2006-02-01 11:03 ` Kim F. Storm
@ 2006-02-02 4:16 ` Richard M. Stallman
2 siblings, 0 replies; 7+ messages in thread
From: Richard M. Stallman @ 2006-02-02 4:16 UTC (permalink / raw)
Cc: emacs-devel
I personally think that this sounds like a pretty radical change,
supposedly "relatively shortly" before a release. Any reason why this
can not wait till after the release?
It is a serious security problem. We should fix it before the release.
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2006-02-02 4:47 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-01-24 16:47 Instead of `risky-local-variable' Richard M. Stallman
2006-02-01 0:27 ` Luc Teirlinck
2006-02-01 2:46 ` Chong Yidong
2006-02-02 4:14 ` Richard M. Stallman
2006-02-02 4:47 ` Chong Yidong
2006-02-01 11:03 ` Kim F. Storm
2006-02-02 4:16 ` Richard M. Stallman
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).