Re: [PATCH] Re: [BUG][Security] begin_src :var evaluated before the prompt to confirm execution

2022-11-09 Thread Ihor Radchenko
Ihor Radchenko writes: > See the attached tentative patch. > I tried to balance between annoying users with query and not evaluating > unsafe code: '-quoted lists and symbols are still evaluated without > prompt. Fixed. Applied onto main.

Re: [PATCH] Re: [BUG][Security] begin_src :var evaluated before the prompt to confirm execution

2022-10-28 Thread Ihor Radchenko
Max Nikulin writes: > On 28/10/2022 10:15, Ihor Radchenko wrote: >> >> See the attached tentative patch. >> I tried to balance between annoying users with query and not evaluating >> unsafe code: '-quoted lists and symbols are still evaluated without >> prompt. >> >> Let me know if you see any

Re: [PATCH] Re: [BUG][Security] begin_src :var evaluated before the prompt to confirm execution

2022-10-28 Thread Max Nikulin
On 28/10/2022 10:15, Ihor Radchenko wrote: See the attached tentative patch. I tried to balance between annoying users with query and not evaluating unsafe code: '-quoted lists and symbols are still evaluated without prompt. Let me know if you see any potential issues. If I got it right, it

[PATCH] Re: [BUG][Security] begin_src :var evaluated before the prompt to confirm execution

2022-10-27 Thread Ihor Radchenko
Max Nikulin writes: > Consider the following source block > > >8 > #+begin_src elisp :var a=(message "%s" "pwnd") >a > #+end_src > 8< > > Open the "*Messages*" buffer (C-h e) and try to evaluate the source > block (C-c C-c). > > Actual result: > "pwnd" message appears in