Re: Risky local variable mechanism

[Richard M. Stallman]

    How about this patch?  It implements a `safe-local-variables' custom
    option.  If a variable is not in this list, the user is prompted
    before it is set.  If the user agrees to set it, and the variable is
    not explicitly marked as risky (as determined by the currently
    existing `risky-local-variable-p' function), we ask if that variable
    can be automatically set in the future.  If the user agrees to this
    too, `safe-local-variables' is updated and saved to the custom-file.

It's not enough to ask just about variable names--the question has
to be about a variable/value pair.

The best way to ask the question would be to highlight the text
in the buffer that specifies the variable and value, and make that
appear in a window.  That way, the actual question can be simple.