vim - modeline vulnerability [LWN.net]

vim - modeline vulnerability

Posted Jan 23, 2003 12:54 UTC (Thu) by rwmj (guest, #5474)
Parent article: vim - modeline vulnerability

I'm glad to see useful features from Microsoft Word being integrated at last into archaic Unix tools like 'vi'.

(Log in to post comments)

vim's got company in emacs

Posted Feb 7, 2003 18:49 UTC (Fri) by Max.Hyre (subscriber, #1054) [Link]

emacs is the same, if not worse. (See the node File Variables in the info docs.) You get not only to set random buffer-local variables, but also to evaluate arbitrary lisp code. Ouch!

At least the latter, by default, asks your permission, while the former prevents access to a number of variables deemed to be a particular risk.

Unfortunately, auto-setup for a given file is too handy to pass up, so I make it ask me everytime. Great, if I can avoid getting complacent about saying `yes'....