Fix #1186 - Use -w by default for Perl, which does not execute code

1 files changed, 5 insertions, 1 deletions

diff --git a/doc/ale-perl.txt b/doc/ale-perl.txt
index 7611d30f..7142d241 100644
--- a/doc/ale-perl.txt
+++ b/doc/ale-perl.txt
@@ -16,11 +16,15 @@ g:ale_perl_perl_executable                         *g:ale_perl_perl_executable*
 g:ale_perl_perl_options                               *g:ale_perl_perl_options*
                                                       *b:ale_perl_perl_options*
   Type: |String|
-  Default: `'-c -Mwarnings -Ilib'`
+  Default: `'-w -Mwarnings -Ilib'`
 
   This variable can be changed to alter the command-line arguments to the perl
   invocation.
 
+  Perl code is checked with `-w` by default, because `-c` can execute
+  malicious code. You can use the `-c` option at your own risk. See
+  |g:ale_pattern_options| for changing the option only for specific files.
+
 
 ===============================================================================
 perlcritic                                                *ale-perl-perlcritic*