[slime-devel] Re: Daily ChangeLog diff

[Matthias Koeppe]

Luke Gorrie <luke at synap.se> writes:

> lgorrie at common-lisp.net (Luke Gorrie) writes:
>
>> +	* slime.el (slime-enable-evaluate-in-emacs): New variable.
>> +	(evaluate-in-emacs): Security improvement: If
>> +	slime-enable-evaluate-in-emacs is nil (the default), don't
>> +	evaluate forms sent by the Lisp.
>
> grep says that eval-in-emacs is being used in the CMUCL and LispWorks
> backends. If this should be disallowed by default I think those bits
> need to be replaced with real protocol messages instead of evals.

Thanks for pointing this out; I'll look into it.

-- 
Matthias Köppe -- http://www.math.uni-magdeburg.de/~mkoeppe