A post by Eshel Yaron with details and advice about a long standing arbitrary code execution vulnerability in Emacs
  • Atemu@lemmy.ml
    9·
    7 days ago

    IDEs and such prompt the user whether they trust any new repositories they open. If Emacs had similar functionality, elisp eval could simply be disabled by default and users would then M-x trust-this-repository to permanently enable it again for the repo they’re in.

    • samc@feddit.ukEnglish
      2·
      6 days ago

      Plus we could also get rid of the hacky risky vs safe dir-locals system that fills up custom.el with clutter

  • sir_pronoun@lemmy.worldEnglish
    54·
    7 days ago

    …all y’all know exactly how to avoid an emacs vulnerability, but I’m afraid to VoIce My opinion