vi `ei:' (`modeline')

Guy Harris guy at auspex.UUCP
Wed Oct 26 02:22:59 AEST 1988


>) I want [modelines] on 95% of the time.  Yes, I know its a security
>) hole.  But it's such a damned useful little hole.....
>
>The clever thing to do, then, would be to close the security hole.
>Refuse to pass "!" commands from modelines.  Leave the useful
>functionality (file configures editor properly) in place.

*AND* provide some way for a user to shut modelines OFF, just in case
they DON'T like getting surprised by random commands being executed by
the editor just because a character sequence that looks like a modeline
happens to be in the file....  (Both 4.3BSD and S5R3 provide this;
there's an option that has to be "on" in order for "ex"/"vi" to
recognize modelines.  Unfortunately, 4.3BSD calls it "modeline" and S5R3
calls it "modelines"....)



More information about the Comp.bugs.sys5 mailing list