Stefan Monnier <[EMAIL PROTECTED]> writes:

>>> Now, when desktop.el loads it, it asks if I want to apply the
>>> font-lock-keywords customisation, because it is risky (is it?).
>
>> Font-lock can modify arbitrary text properties, such as display
>> strings, and not just faces.
>
> And it can also directly run any code, which is even more immediately scary.
> We should probably write a font-lock-keywords-safe-p.  Something like the
> one below, maybe.

> ....
> +(put 'font-lock-keywords 'safe-local-variable 'font-lock-keywords-safe-p)

I suggest not changing this until we have time to discuss this,
i.e. after the release.  It would not be good to introduce a security
risk into Emacs at the 11th hour.



_______________________________________________
emacs-pretest-bug mailing list
emacs-pretest-bug@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-pretest-bug

Reply via email to