29 Aug
2005
29 Aug
'05
8:31 p.m.
Matthias Koeppe <mkoeppe+slime@mail.math.uni-magdeburg.de> writes:
Luke Gorrie <luke@synap.se> writes:
lgorrie@common-lisp.net (Luke Gorrie) writes:
+ * slime.el (slime-enable-evaluate-in-emacs): New variable. + (evaluate-in-emacs): Security improvement: If + slime-enable-evaluate-in-emacs is nil (the default), don't + evaluate forms sent by the Lisp.
grep says that eval-in-emacs is being used in the CMUCL and LispWorks backends. If this should be disallowed by default I think those bits need to be replaced with real protocol messages instead of evals.
Thanks for pointing this out; I'll look into it.
Done. -- Matthias Köppe -- http://www.math.uni-magdeburg.de/~mkoeppe