bug#37656: 27.0.50; Arbitrary code execution with special `mode:'

[Phil Sainty]

On 2019-10-16 11:55, Stefan Kangas wrote:
> Here is a more complete patch.  Does it look like the right fix?

I don't think so.  If we're removing the multiple 'mode' feature, then
`set-auto-mode' says the following about it:

    ;; Once we drop the deprecated feature where mode: is also allowed 
to
    ;; specify minor-modes (ie, there can be more than one "mode:"), we 
can
    ;; remove this section and just let (hack-local-variables t) handle 
it.
    ;; Find a -*- mode tag.