|
| From: | Paul Eggert |
| Subject: | bug#51327: 28.0.60; emacsclient warns about XDG_RUNTIME_DIR when starting daemon on demand |
| Date: | Thu, 11 Nov 2021 18:21:24 -0800 |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.2.1 |
On 11/11/21 09:06, Jim Porter wrote:
It's possible that this behavior is perfectly safe, but the way the code is currently written (plus Paul Eggert's reply in this bug) seem to indicate that it's vulnerable to attack.
Yes, that's indeed the worry.
| [Prev in Thread] | Current Thread | [Next in Thread] |