diff options
| author | Mattias Engdegård <mattiase@acm.org> | 2020-10-31 11:35:06 +0100 |
|---|---|---|
| committer | Mattias Engdegård <mattiase@acm.org> | 2020-10-31 13:42:07 +0100 |
| commit | c3a20804a81826ec091a4a096c1987a61e412580 (patch) | |
| tree | 0cf4216fe7bd30a49ec1efc2660c91869cf16c38 /test/lisp/emacs-lisp/bindat-tests.el | |
| parent | a78c6141bc1a34622894af3cee45f350e3b629ac (diff) | |
| download | emacs-c3a20804a81826ec091a4a096c1987a61e412580.tar.gz emacs-c3a20804a81826ec091a4a096c1987a61e412580.tar.bz2 emacs-c3a20804a81826ec091a4a096c1987a61e412580.zip | |
Trim and explain set of safe forms for 'unsafep' (bug#44018)
* lisp/emacs-lisp/unsafep.el:
Add comment explaining the policy for which forms can be considered
'safe' in the sense of unsafep. Remove ones that didn't make the cut:
play-sound-file (large attack surface)
catch, throw (alter program flow, inject data)
replace-regexp-in-string (execute arbitary code)
error, signal (deceptive messages)
* test/lisp/emacs-lisp/unsafep-tests.el (unsafep-tests--unsafe):
Add test cases.
* etc/NEWS: Announce the change.
Diffstat (limited to 'test/lisp/emacs-lisp/bindat-tests.el')
0 files changed, 0 insertions, 0 deletions