Emacs

2563 readers

1 users here now

Our infinitely powerful editor.

founded 5 years ago

MODERATORS

[email protected]

Emacs Arbitrary Code Execution and How to Avoid It (eshelyaron.com)

submitted 7 months ago by [email protected] to c/[email protected]

7 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 9 points 7 months ago (1 children)

IDEs and such prompt the user whether they trust any new repositories they open. If Emacs had similar functionality, elisp eval could simply be disabled by default and users would then M-x trust-this-repository to permanently enable it again for the repo they're in.

permalink
fedilink
source
hideshow 2 child comments

[–] [email protected] 2 points 7 months ago

Plus we could also get rid of the hacky risky vs safe dir-locals system that fills up custom.el with clutter

permalink
fedilink
source
parent