Re: Undocumented RCE potential with emacsclient and socket forwarding
Perry Fraser <[email protected]> Fri, 31 Jul 2026 09:49:45 -0400
| Newsgroups | gmane.emacs.devel |
|---|---|
| Message-ID | <[email protected]> |
Sean Whitton <[email protected]> writes: > I think it would be okay just to document it. > > FWIW as a user I would not expect that a forwarded socket would be > locked down in any particular way. Do you have any particular reason not to do a backwards-compatible customization var that allows disabling the `-eval' command? Thanks, ― Perry