Re: security problem in emacs

[Alfred M. Szmidt]

   Is the new attached file also fixed?

Emacs CVS gives a warning about the code.

   I suggest you disable local variables by default - they are not
   portable and some people use emacs for examining untrusted log
   files or read mail.

Disabling local variables completely seems silly.  Making Emacs warn
the user when running local-hook's or eval's is a far better idea;
which is done in CVS.  Local variables are very useful.