Re: Fixing security vulnerabilities before new releases

>> I'd move the let-binding to `vc-make-backend-sym` (i.e. to right around
>> the relevant `intern` call).
>
> That was my initial approach, but the above let-binding position also
> protects that (require ATTACKER-CONTROLLED-SYMBOL) above, which seems
> like a nice bonus. :)

I see.  I'd have changed both `intern` calls, but indeed you get two for
the price of one.


=== Stefan