From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: storm@cua.dk (Kim F. Storm) Newsgroups: gmane.emacs.devel Subject: Re: Risky local variable mechanism Date: Thu, 02 Feb 2006 00:31:54 +0100 Message-ID: References: <200602011024.29973.jyavner@member.fsf.org> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1138843447 7980 80.91.229.2 (2 Feb 2006 01:24:07 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 2 Feb 2006 01:24:07 +0000 (UTC) Cc: Jonathan Yavner , emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Feb 02 02:23:57 2006 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by ciao.gmane.org with esmtp (Exim 4.43) id 1F4TCV-0006SY-EB for ged-emacs-devel@m.gmane.org; Thu, 02 Feb 2006 02:23:55 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1F4TFa-0002Yp-Qa for ged-emacs-devel@m.gmane.org; Wed, 01 Feb 2006 20:27:06 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1F4RWF-0006pl-FH for emacs-devel@gnu.org; Wed, 01 Feb 2006 18:36:11 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1F4RWD-0006nU-8x for emacs-devel@gnu.org; Wed, 01 Feb 2006 18:36:10 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1F4RWC-0006nE-Td for emacs-devel@gnu.org; Wed, 01 Feb 2006 18:36:09 -0500 Original-Received: from [195.41.46.237] (helo=pfepc.post.tele.dk) by monty-python.gnu.org with esmtp (Exim 4.52) id 1F4RUw-0000Rz-Bz for emacs-devel@gnu.org; Wed, 01 Feb 2006 18:34:50 -0500 Original-Received: from kfs-l.imdomain.dk.cua.dk (0x503e2644.bynxx3.adsl-dhcp.tele.dk [80.62.38.68]) by pfepc.post.tele.dk (Postfix) with SMTP id 5DBC826282D; Thu, 2 Feb 2006 00:32:49 +0100 (CET) Original-To: Stefan Monnier In-Reply-To: (Stefan Monnier's message of "Wed, 01 Feb 2006 12:00:58 -0500") User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (gnu/linux) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:49892 Archived-At: Stefan Monnier writes: >>> Maybe "string and integer custom vars" are all safe, I don't know. >> No, sendmail-program is not safe, nor is max-eval-lisp-depth. > > Indeed, names of external programs need to be ruled out. Maybe all variables matching "-program$" and "-path$" should be ruled out. -- Kim F. Storm http://www.cua.dk