summaryrefslogtreecommitdiff
path: root/man/faq.texi
diff options
context:
space:
mode:
authorChong Yidong <cyd@stupidchicken.com>2006-07-19 02:22:51 +0000
committerChong Yidong <cyd@stupidchicken.com>2006-07-19 02:22:51 +0000
commitfce10019388760b528ee131e7182b2236154b692 (patch)
treecb7a6be308a4f89f94eaf27602ca13e55a54fe8e /man/faq.texi
parent1ef252f636b11627d4e2d528ff5e952e407cfe3d (diff)
downloademacs-fce10019388760b528ee131e7182b2236154b692.tar.gz
* faq.texi (Security risks with Emacs): Document Emacs 22
file-local-variable mechanism.
Diffstat (limited to 'man/faq.texi')
-rw-r--r--man/faq.texi14
1 files changed, 6 insertions, 8 deletions
diff --git a/man/faq.texi b/man/faq.texi
index 5fc21eb8575..d431dd360c0 100644
--- a/man/faq.texi
+++ b/man/faq.texi
@@ -3125,14 +3125,12 @@ arbitrary Emacs Lisp code evaluated when the file is visited.
Obviously, there is a potential for Trojan horses to exploit this
feature.
-Emacs 18 allowed this feature by default; users could disable it by
-setting the variable @code{inhibit-local-variables} to a non-@code{nil} value.
-
-As of Emacs 19, Emacs has a list of local variables that create a
-security risk. If a file tries to set one of them, it asks the user to
-confirm whether the variables should be set. You can also tell Emacs
-whether to allow the evaluation of Emacs Lisp code found at the bottom
-of files by setting the variable @code{enable-local-eval}.
+As of Emacs 22, Emacs has a list of local variables that are known to
+be safe to set. If a file tries to set any variable outside this
+list, it asks the user to confirm whether the variables should be set.
+You can also tell Emacs whether to allow the evaluation of Emacs Lisp
+code found at the bottom of files by setting the variable
+@code{enable-local-eval}.
For more information, @inforef{File Variables, File Variables, emacs}.