all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* Instead of `risky-local-variable'
@ 2006-01-24 16:47 Richard M. Stallman
  2006-02-01  0:27 ` Luc Teirlinck
  0 siblings, 1 reply; 7+ messages in thread
From: Richard M. Stallman @ 2006-01-24 16:47 UTC (permalink / raw)


I'm considering a more reliable replacement for the
`risky-local-variable' mechanism.  My idea is that only defcustom'ed
variables could be specified in a local variables list, and that the
:type together with the specified value would determine whether a
variable is safe.

What do people think?

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: Instead of `risky-local-variable'
  2006-01-24 16:47 Instead of `risky-local-variable' Richard M. Stallman
@ 2006-02-01  0:27 ` Luc Teirlinck
  2006-02-01  2:46   ` Chong Yidong
                     ` (2 more replies)
  0 siblings, 3 replies; 7+ messages in thread
From: Luc Teirlinck @ 2006-02-01  0:27 UTC (permalink / raw)
  Cc: emacs-devel

Richard Stallman wrote:

   I'm considering a more reliable replacement for the
   `risky-local-variable' mechanism.  My idea is that only defcustom'ed
   variables could be specified in a local variables list, and that the
   :type together with the specified value would determine whether a
   variable is safe.

   What do people think?

I personally think that this sounds like a pretty radical change,
supposedly "relatively shortly" before a release.  Any reason why this
can not wait till after the release?

Sincerely,

Luc.

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: Instead of `risky-local-variable'
  2006-02-01  0:27 ` Luc Teirlinck
@ 2006-02-01  2:46   ` Chong Yidong
  2006-02-02  4:14     ` Richard M. Stallman
  2006-02-01 11:03   ` Kim F. Storm
  2006-02-02  4:16   ` Richard M. Stallman
  2 siblings, 1 reply; 7+ messages in thread
From: Chong Yidong @ 2006-02-01  2:46 UTC (permalink / raw)


> I'm considering a more reliable replacement for the
> `risky-local-variable' mechanism.  My idea is that only defcustom'ed
> variables could be specified in a local variables list, and that the
> :type together with the specified value would determine whether a
> variable is safe.

This won't work for defcustoms that haven't been loaded yet.

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: Instead of `risky-local-variable'
  2006-02-01  0:27 ` Luc Teirlinck
  2006-02-01  2:46   ` Chong Yidong
@ 2006-02-01 11:03   ` Kim F. Storm
  2006-02-02  4:16   ` Richard M. Stallman
  2 siblings, 0 replies; 7+ messages in thread
From: Kim F. Storm @ 2006-02-01 11:03 UTC (permalink / raw)
  Cc: rms, emacs-devel

Luc Teirlinck <teirllm@dms.auburn.edu> writes:

> Richard Stallman wrote:
>
>    I'm considering a more reliable replacement for the
>    `risky-local-variable' mechanism.  My idea is that only defcustom'ed
>    variables could be specified in a local variables list, and that the
>    :type together with the specified value would determine whether a
>    variable is safe.
>
>    What do people think?
>
> I personally think that this sounds like a pretty radical change,
> supposedly "relatively shortly" before a release.  Any reason why this
> can not wait till after the release?

I don't even want to think about this before the release!

-- 
Kim F. Storm <storm@cua.dk> http://www.cua.dk

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: Instead of `risky-local-variable'
  2006-02-01  2:46   ` Chong Yidong
@ 2006-02-02  4:14     ` Richard M. Stallman
  2006-02-02  4:47       ` Chong Yidong
  0 siblings, 1 reply; 7+ messages in thread
From: Richard M. Stallman @ 2006-02-02  4:14 UTC (permalink / raw)
  Cc: emacs-devel

    > I'm considering a more reliable replacement for the
    > `risky-local-variable' mechanism.  My idea is that only defcustom'ed
    > variables could be specified in a local variables list, and that the
    > :type together with the specified value would determine whether a
    > variable is safe.

    This won't work for defcustoms that haven't been loaded yet.

It would probably refuse to bind the variable in such a case, but is
that really a problem in practice?  A file local binding is useful
because the variable is going to do something, which means the package
that obeys it needs to be loaded.

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: Instead of `risky-local-variable'
  2006-02-01  0:27 ` Luc Teirlinck
  2006-02-01  2:46   ` Chong Yidong
  2006-02-01 11:03   ` Kim F. Storm
@ 2006-02-02  4:16   ` Richard M. Stallman
  2 siblings, 0 replies; 7+ messages in thread
From: Richard M. Stallman @ 2006-02-02  4:16 UTC (permalink / raw)
  Cc: emacs-devel

    I personally think that this sounds like a pretty radical change,
    supposedly "relatively shortly" before a release.  Any reason why this
    can not wait till after the release?

It is a serious security problem.  We should fix it before the release.

^ permalink raw reply	[flat|nested] 7+ messages in thread

* Re: Instead of `risky-local-variable'
  2006-02-02  4:14     ` Richard M. Stallman
@ 2006-02-02  4:47       ` Chong Yidong
  0 siblings, 0 replies; 7+ messages in thread
From: Chong Yidong @ 2006-02-02  4:47 UTC (permalink / raw)
  Cc: emacs-devel

"Richard M. Stallman" <rms@gnu.org> writes:

>     > I'm considering a more reliable replacement for the
>     > `risky-local-variable' mechanism.  My idea is that only defcustom'ed
>     > variables could be specified in a local variables list, and that the
>     > :type together with the specified value would determine whether a
>     > variable is safe.
>
>     This won't work for defcustoms that haven't been loaded yet.
>
> It would probably refuse to bind the variable in such a case, but is
> that really a problem in practice?  A file local binding is useful
> because the variable is going to do something, which means the package
> that obeys it needs to be loaded.

It might be a problem for variables associated with minor modes that
the user may only turn on after visiting the file.

^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2006-02-02  4:47 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-01-24 16:47 Instead of `risky-local-variable' Richard M. Stallman
2006-02-01  0:27 ` Luc Teirlinck
2006-02-01  2:46   ` Chong Yidong
2006-02-02  4:14     ` Richard M. Stallman
2006-02-02  4:47       ` Chong Yidong
2006-02-01 11:03   ` Kim F. Storm
2006-02-02  4:16   ` Richard M. Stallman

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.