1
Fork 0
mirror of git://git.sv.gnu.org/emacs.git synced 2026-04-26 16:20:49 -07:00
emacs/doc/lispref
Eli Zaretskii a103dbe360 Disable execution of unsafe Lisp by Enriched Text mode
* src/xdisp.c (handle_display_spec): If the display property is
wrapped in 'disable-eval' form, disable Lisp evaluation while
processing this property.
(handle_single_display_spec): Accept new argument ENABLE_EVAL_P.
If that argument is false, don't evaluate Lisp while processing
display properties.

* lisp/textmodes/enriched.el
(enriched-allow-eval-in-display-props): New defcustom.
(enriched-decode-display-prop): If
enriched-allow-eval-in-display-props is nil, wrap the display
property with 'disable-eval' to disable Lisp evaluation when the
display property is processed for display.  (Bug#28350)
* lisp/gnus/mm-view.el (mm-inline-text): Re-enable processing of
enriched text.

* doc/lispref/display.texi (Display Property): Document the
'disable-eval' wrapping of 'display' properties.
* doc/emacs/text.texi (Enriched Properties): Document
'enriched-allow-eval-in-display-props'.

* etc/NEWS: Describe the security issues with Enriched Text mode
and their solution.
2017-09-16 12:45:24 +03:00
..
abbrevs.texi
anti.texi Rewrite Antinews for Emacs 26 2017-09-02 12:37:51 +03:00
back.texi
backups.texi Be more consistent about "directory name" in manual 2017-09-09 13:41:20 -07:00
book-spine.texi
buffers.texi
ChangeLog.1
commands.texi Be more consistent about "directory name" in manual 2017-09-09 13:41:20 -07:00
compile.texi
control.texi
customize.texi Be more consistent about "directory name" in manual 2017-09-09 13:41:20 -07:00
debugging.texi
display.texi Disable execution of unsafe Lisp by Enriched Text mode 2017-09-16 12:45:24 +03:00
doclicense.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
edebug.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
elisp.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
errors.texi
eval.texi Update documentation of 'max-lisp-eval-depth' 2017-09-11 19:48:56 +03:00
files.texi Allow write-contents-functions to short-circuit buffer save 2017-09-12 16:06:12 -07:00
frames.texi Add ability to change macOS WM theme (bug#27973) 2017-08-23 19:57:00 +01:00
functions.texi Fix a minor markup problem in ELisp manual 2017-09-06 21:00:29 +03:00
gpl.texi
hash.texi
help.texi
hooks.texi
index.texi
internals.texi
intro.texi
keymaps.texi
lay-flat.texi
lists.texi
loading.texi Be more consistent about "directory name" in manual 2017-09-09 13:41:20 -07:00
macros.texi
Makefile.in Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
maps.texi
markers.texi
minibuf.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
modes.texi
nonascii.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
numbers.texi
objects.texi
os.texi Be more consistent about "directory name" in manual 2017-09-09 13:41:20 -07:00
package.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
positions.texi
processes.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
README Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
records.texi
searching.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
sequences.texi
spellfile
streams.texi
strings.texi
symbols.texi Remove "baroque" use of prefix argument from gensym 2017-09-13 10:38:05 -04:00
syntax.texi
text.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
threads.texi
tips.texi Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
two-volume-cross-refs.txt Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
two-volume.make Prefer HTTPS to FTP and HTTP in documentation 2017-09-13 15:54:37 -07:00
variables.texi ; Fix typo in lispref 2017-08-20 22:31:25 -04:00
windows.texi Fix one more issue reported by Alex (Bug#27999) 2017-08-19 11:23:10 +02:00

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

Copyright (C) 2001-2017 Free Software Foundation, Inc.  -*- outline -*-
See the end of the file for license conditions.


README for the Emacs Lisp Reference Manual.

* This directory contains the texinfo source files for the Emacs Lisp
Reference Manual.

* Report bugs in the Lisp Manual (or in Emacs) using M-x report-emacs-bug.
To ask questions, use the help-gnu-emacs mailing list.

* The Emacs Lisp Reference Manual is quite large.  It totals around
1100 pages in smallbook format; the info files total around 3.0 megabytes.

* You can format this manual for Info, for printing hardcopy using TeX,
or for HTML.

* You can buy nicely printed copies from the Free Software Foundation.
Buying a manual from the Free Software Foundation helps support our GNU
development work.  See <https://shop.fsf.org/>.
(At time of writing, this manual is out of print.)

* The master file for formatting this manual for Tex is called 'elisp.texi'.
It contains @include commands to include all the chapters that make up
the manual.

* This distribution contains a Makefile that you can use with GNU Make.

** To make an Info file, you need to install Texinfo, then run 'make info'.

** Use 'make elisp.pdf' or 'make elisp.html' to create PDF or HTML versions.


This file is part of GNU Emacs.

GNU Emacs is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

GNU Emacs is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with GNU Emacs.  If not, see <https://www.gnu.org/licenses/>.