emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: mark .dir-locals.el buffer or file as safe instead of variables as s


From: Eli Zaretskii
Subject: Re: mark .dir-locals.el buffer or file as safe instead of variables as safe
Date: Wed, 27 Jun 2018 05:33:59 +0300

> Date: Tue, 26 Jun 2018 21:14:52 -0300
> From: address@hidden
> 
> https://www.gnu.org/software/emacs/manual/html_node/emacs/Safe-File-Variables.html#Safe-File-Variables
> 
> I'm trying to wrap my head around this, and I, in my *very* humble 
> opinion, think, it's a bad design decision.
> 
> and that's because:
> One just *do not trust variables*, only *those who modify it*.

I believe there's a possibility of someone's maliciously redirecting
your "trusted" file to another one, e.g. with a symlink.

IOW, we don't really know who modified the file and why.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]