Re: Risky local variable mechanism

[Richard M. Stallman]

    I rarely use file-local variables, so it's hard for me to figure out which
    set of restrictions will be best.  Using custom types sounds like a good
    idea, but note that setting "boolean" variables can be dangerous as well
    (e.g. enable-local-eval).

That is a good point--but there are just a few variables which are
dangerous in that way, and they already are marked.  The big set of
variables which are dangerous but not marked are those whose values
can be functions to call.  That is what I am hoping to recognize using
custom types.

Another idea: just check to see if the value is a function name, or if
any function name (including lambda) appears in it.  If so, the value
is risky.  That is quite simple and does not depend on knowing the
custom type.