[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Risky local variable mechanism
|
From: |
Kim F. Storm |
|
Subject: |
Re: Risky local variable mechanism |
|
Date: |
Thu, 02 Feb 2006 00:31:54 +0100 |
|
User-agent: |
Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (gnu/linux) |
Stefan Monnier <address@hidden> writes:
>>> Maybe "string and integer custom vars" are all safe, I don't know.
>> No, sendmail-program is not safe, nor is max-eval-lisp-depth.
>
> Indeed, names of external programs need to be ruled out.
Maybe all variables matching "-program$" and "-path$" should be
ruled out.
--
Kim F. Storm <address@hidden> http://www.cua.dk