Re: master c86995d07e9: Enable code block evaluation when generating .org manuals

[Robert Pluim]

>>>>> On Thu,  6 Jun 2024 08:36:16 -0400 (EDT), Eli Zaretskii <eliz@gnu.org> 
>>>>> said:

    Eli> diff --git a/doc/misc/Makefile.in b/doc/misc/Makefile.in
    Eli> index 2841916dc89..b26d3525a22 100644
    Eli> --- a/doc/misc/Makefile.in
    Eli> +++ b/doc/misc/Makefile.in
    Eli> @@ -250,6 +250,7 @@ define org_template
    Eli>   $(1:.org=.texi): $(1) ${top_srcdir}/lisp/org/ox-texinfo.el
    Eli>        $${AM_V_GEN}cd "$${srcdir}" && $${emacs} -l ox-texinfo \
    Eli>          --eval '(setq gc-cons-threshold 50000000)' \
    Eli> +        --eval '(setq org-confirm-babel-evaluate nil)' \
    Eli>          -f org-texinfo-export-to-texinfo-batch $$(notdir $$<) 
$$(notdir $$@)
    Eli>  endef

This has set off my paranoia alarm. So anyone that manages to
sneak malicious emacs lisp code into the org manual gets to run that
code on the machines of everyone who builds emacs from source?

(I know, I know, we already run emacs lisp code during the build. But
it comes from .el files, generally, not documentation).

Robert
--