29 Aug
2005
29 Aug
'05
4:42 a.m.
lgorrie@common-lisp.net (Luke Gorrie) writes:
+ * slime.el (slime-enable-evaluate-in-emacs): New variable. + (evaluate-in-emacs): Security improvement: If + slime-enable-evaluate-in-emacs is nil (the default), don't + evaluate forms sent by the Lisp.
grep says that eval-in-emacs is being used in the CMUCL and LispWorks backends. If this should be disallowed by default I think those bits need to be replaced with real protocol messages instead of evals. Cheers, Luke