[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [BUG][Security] begin_src :var evaluated before the prompt to confir
From: |
Ihor Radchenko |
Subject: |
Re: [BUG][Security] begin_src :var evaluated before the prompt to confirm execution |
Date: |
Fri, 28 Oct 2022 03:19:46 +0000 |
Jean Louis <bugs@gnu.support> writes:
> * Max Nikulin <manikulin@gmail.com> [2022-10-27 06:21]:
>> Expected result:
>> No code from the Org buffer and linked files is executed prior to
>> confirmation from the user.
>
> Should that be or is it a general policy for Org mode?
Yes, it is a general policy.
Org should not execute arbitrary Elisp without confirmation, unless the
user customizes the confirmation query to non-default.
--
Ihor Radchenko // yantar92,
Org mode contributor,
Learn more about Org mode at <https://orgmode.org/>.
Support Org development at <https://liberapay.com/org-mode>,
or support my work at <https://liberapay.com/yantar92>