Re: The `risky-local-variable' blacklist

[Kim F. Storm]

Richard Stallman <address@hidden> writes:

> Here's an idea that might do the job and be acceptable.  Each time
> Emacs sees a variable/value combination that is new for the current
> user, it asks the user to confirm that combination.  Any given
> combination only needs to be confirmed once by any given user.  This
> could reduce the repetitive nuisance down to the point where people
> will (1) accept the burden and (2) not zone out when they see the
> questions.

Quoting from NEWS, we already added the foundation for this:

** The variable `safe-local-eval-forms' specifies a list of forms that
are ok to evaluate when they appear in an `eval' local variables
specification.  Normally Emacs asks for confirmation before evaluating
such a form, but if the form appears in this list, no confirmation is
needed.


IIRC, we discussed back then whether to give the user a choice to
automatically add an eval form to that list when prompted to confirm.
But it was rejected/postponed due to lack of interest.

Since safe-local-eval-forms is a defcustom, the feature can probably
be implemented quite easily via suitable custom functions that updates
and saves the value.

BTW, shouldn't safe-local-eval-forms be marked risky ???

-- 
Kim F. Storm <address@hidden> http://www.cua.dk