|
From: | Stefan Monnier |
Subject: | Re: [Emacs-diffs] scratch/allow-custom-load-paths-in-elisp-flymake 4ef9711: Allow custom load paths in elisp's byte-compilation Flymake |
Date: | Tue, 04 Dec 2018 23:34:48 -0500 |
User-agent: | Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) |
> +(put 'elisp-flymake-byte-compile-load-path 'safe-local-variable > + (lambda (x) (and (listp x) (catch 'tag > + (dolist (path x t) (unless (stringp path) > + (throw 'tag nil))))))) Just reminded me: we have a serious problem w.r.t security of flymake-mode in Elisp buffers: if someone enables flymake-mode for all elisp-mode buffers (i.e. what I'd like to do by default), the mere act of visiting an Elisp file means that file will be passed to byte-compile which will happily execute some of the code within, running arbitrarily dangerous code. Stefan
[Prev in Thread] | Current Thread | [Next in Thread] |