[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Emacs-diffs] scratch/allow-custom-load-paths-in-elisp-flymake 4ef97

From: Stefan Monnier
Subject: Re: [Emacs-diffs] scratch/allow-custom-load-paths-in-elisp-flymake 4ef9711: Allow custom load paths in elisp's byte-compilation Flymake
Date: Tue, 04 Dec 2018 23:34:48 -0500
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux)

> +(put 'elisp-flymake-byte-compile-load-path 'safe-local-variable
> +     (lambda (x) (and (listp x) (catch 'tag
> +                                  (dolist (path x t) (unless (stringp path)
> +                                                       (throw 'tag nil)))))))

Just reminded me: we have a serious problem w.r.t security of
flymake-mode in Elisp buffers: if someone enables flymake-mode for all
elisp-mode buffers (i.e. what I'd like to do by default), the mere act
of visiting an Elisp file means that file will be passed to byte-compile
which will happily execute some of the code within, running arbitrarily
dangerous code.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]