[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [O] Bug: org-attach-directory should be safe [9.1.3 (9.1.3-10-gadfbf

From: Nicolas Goaziou
Subject: Re: [O] Bug: org-attach-directory should be safe [9.1.3 (9.1.3-10-gadfbfd-elpaplus @ /home/ionasal/.emacs.d/elpa/org-plus-contrib-20171127/)]
Date: Mon, 04 Dec 2017 14:56:33 +0100
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux)


Allen Li <address@hidden> writes:

> org-attach-directory should be safe to set as a file local or
> directory local string.
> This allows the user to set a directory local attachment directory for
> all Org files in a directory tree recursively.
> I do not believe there are any security issues to enable arbitrary Org
> files to set org-attach-directory to a string value as the user would
> have to explicitly initiate any attach operations.  The most dangerous
> thing I can think of is an Org file setting the attachment directory
> to the user's home directory and the user running the command to
> delete all attachments.

Fair enough. I added a :safe keyword to the defcustom.


Nicolas Goaziou

reply via email to

[Prev in Thread] Current Thread [Next in Thread]