Date: Mon, 12 Jul 2004 09:05:53 -0400 From: "N. Thomas" <nthomas@cise.ufl.edu> To: freebsd-questions@freebsd.org Subject: Re: nvi and modelines Message-ID: <20040712130553.GC2863@cise.ufl.edu> In-Reply-To: <5ef8c2f004070819386673edbb@mail.gmail.com> References: <5ef8c2f004070819386673edbb@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
* Jos? de Paula <espinafre@gmail.com> [2004-07-08 23:38:22 -0300]:
> The nvi manual page says that modelines will never be implemented.
> Does anyone know the rationale behind this
Probably because it's a *huge* security risk. Modelines will cause vi to
read commands from the file. Can you imagine what it could do in the
wrong hands?
Even Vim, preeminent among vi clones, uses only a "stripped down"
modeline. From the online Vim manual:
No other commands than "set" are supported, for security reasons
(somebody might create a Trojan horse text file with modelines).
Is there something that you want to do with modelines that you can't do
in nvi?
Thomas
--
N. Thomas
nthomas@cise.ufl.edu
Etiamsi occiderit me, in ipso sperabo
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040712130553.GC2863>