Re: Undocumented RCE potential with emacsclient and socket forwarding

Perry Fraser <[email protected]> Fri, 31 Jul 2026 09:49:45 -0400
Newsgroups gmane.emacs.devel
Message-ID <[email protected]>
Sean Whitton <[email protected]> writes:
> I think it would be okay just to document it.
>
> FWIW as a user I would not expect that a forwarded socket would be
> locked down in any particular way.

Do you have any particular reason not to do a backwards-compatible
customization var that allows disabling the `-eval' command?

Thanks,

― Perry