unofficial mirror of emacs-devel@gnu.org 
 help / color / mirror / code / Atom feed
* Emacs Arbitrary Code Execution and How to Avoid It
@ 2024-12-03 17:53 Christopher Howard
  2024-12-03 19:20 ` Gerd Möllmann
                   ` (2 more replies)
  0 siblings, 3 replies; 27+ messages in thread
From: Christopher Howard @ 2024-12-03 17:53 UTC (permalink / raw)
  To: Emacs Devel Mailing List

Hi, I read the interesting write up here:

https://eshelyaron.com/posts/2024-11-27-emacs-aritrary-code-execution-and-how-to-avoid-it.html

I wasn't terribly worried about this, as I don't *automatically* activate Flymake or Flycheck. But the article did mention that "code completion runs arbitrary code", and I was wondering more about that. I do not currently use Completion Preview mode. I have used Company in the past but company-mode is not currently activated. So, if I am just viewing an elisp file, i.e., not typing anything it in, nor running dabbrev commands, is there any danger? Should I setup Emacs to, by default, open all elisp files in View Mode?

Regarding dabbrev, I know dabbrev can search all buffers but I don't know if it does any macro expansion.

I was going to e-mail the author of the post, but cloudflare won't let me see his e-mail address.

-- 
📛 Christopher Howard
🚀 gemini://gem.librehacker.com
🌐 http://gem.librehacker.com

בראשית ברא אלהים את השמים ואת הארץ



^ permalink raw reply	[flat|nested] 27+ messages in thread

end of thread, other threads:[~2024-12-11 13:10 UTC | newest]

Thread overview: 27+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-12-03 17:53 Emacs Arbitrary Code Execution and How to Avoid It Christopher Howard
2024-12-03 19:20 ` Gerd Möllmann
2024-12-03 20:25   ` Eshel Yaron
2024-12-08  5:10     ` Richard Stallman
2024-12-06  4:47   ` Richard Stallman
2024-12-06  8:30     ` Eli Zaretskii
2024-12-09  4:57       ` Richard Stallman
2024-12-09 13:59         ` Eli Zaretskii
2024-12-04  9:39 ` Jean Louis
2024-12-04 15:04   ` Steven Allen
2024-12-04 17:02     ` Jean Louis
2024-12-04 17:23       ` Christopher Howard
2024-12-07  4:23       ` Richard Stallman
2024-12-10 18:03         ` Daniel Radetsky
2024-12-11  8:35           ` Eshel Yaron
2024-12-11  9:25             ` Jean Louis
2024-12-11  9:37               ` Daniel Radetsky
2024-12-11 10:38                 ` Jean Louis
2024-12-11 10:42                   ` tomas
2024-12-11 12:50                   ` Daniel Radetsky
2024-12-11 13:10                     ` tomas
2024-12-06  4:47 ` Richard Stallman
2024-12-06  5:30   ` Jim Porter
2024-12-06  8:32     ` Eli Zaretskii
2024-12-06  8:29   ` Eli Zaretskii
2024-12-06 16:51   ` Philip Kaludercic
2024-12-08  5:15     ` Richard Stallman

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).