Subject: bug#37656: 27.0.50; Arbitrary code execution with special `mode:'

From: Stefan Kangas <[email-masked]>
Date: Wed, 16 Oct 2019 00:55:08 +0200

Stefan Kangas <[email-masked]> writes:
> The below patch seems to fix it by disabling the feature it exploits.

Here is a more complete patch.  Does it look like the right fix?

I think the relevant node in the documentation is:
(info "(emacs)Choosing Modes")

Best regards,
Stefan Kangas