[slime-devel] Re: Daily ChangeLog diff

[Luke Gorrie]

lgorrie at common-lisp.net (Luke Gorrie) writes:

> +	* slime.el (slime-enable-evaluate-in-emacs): New variable.
> +	(evaluate-in-emacs): Security improvement: If
> +	slime-enable-evaluate-in-emacs is nil (the default), don't
> +	evaluate forms sent by the Lisp.

grep says that eval-in-emacs is being used in the CMUCL and LispWorks
backends. If this should be disallowed by default I think those bits
need to be replaced with real protocol messages instead of evals.

Cheers,
Luke