From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Chong Yidong Newsgroups: gmane.emacs.devel Subject: Re: Image mode Date: 04 Feb 2007 20:40:39 -0500 Message-ID: References: <87k5yxeg19.fsf@jurta.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1170639659 8416 80.91.229.12 (5 Feb 2007 01:40:59 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Mon, 5 Feb 2007 01:40:59 +0000 (UTC) Cc: emacs-devel@gnu.org To: Juri Linkov Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Feb 05 02:40:51 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1HDsqg-0008St-E0 for ged-emacs-devel@m.gmane.org; Mon, 05 Feb 2007 02:40:50 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HDsqh-0000LZ-SN for ged-emacs-devel@m.gmane.org; Sun, 04 Feb 2007 20:40:51 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HDsqX-0000LU-UD for emacs-devel@gnu.org; Sun, 04 Feb 2007 20:40:41 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HDsqX-0000LM-Iv for emacs-devel@gnu.org; Sun, 04 Feb 2007 20:40:41 -0500 Original-Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1HDsqX-0004fo-6P for emacs-devel@gnu.org; Sun, 04 Feb 2007 20:40:41 -0500 Original-Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id l151eet7003966; Sun, 4 Feb 2007 20:40:40 -0500 (EST) Original-Received: from all-night-tool.mit.edu (ALL-NIGHT-TOOL.MIT.EDU [18.7.18.66]) (authenticated bits=56) (User authenticated as cyd@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id l151edNM012774 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 4 Feb 2007 20:40:39 -0500 (EST) Original-Received: (from cyd@localhost) by all-night-tool.mit.edu (8.12.9.20060308) id l151edR3024846; Sun, 4 Feb 2007 20:40:39 -0500 (EST) In-Reply-To: <87k5yxeg19.fsf@jurta.org> Original-Lines: 28 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.4 X-Scanned-By: MIMEDefang 2.42 X-Spam-Score: 0.00 X-detected-kernel: Solaris 9.1 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:65879 Archived-At: Juri Linkov writes: > A different case is image autodetection. When the image file has an > extension unusual for image files or has no extension at all, then it > would be a (possibly bad) surprise for the user to see it displayed as > an image. I agree that there should be an option that by default before > displaying the image from files with non-image extensions should either > ask for confirmation before visiting such file in image-mode, or (better) > visit the file just in image-minor-mode with more explanations shown > in the echo area. As Richard has argued, IF displaying an image can cause a security risk, it doesn't matter whether or not that image was autodetected or had the relevant file name. So let's please not worry about this. Many other programs that deal with images engage in image autodetection by content, so the consensus in the software community seems to be that the kind of risks we are worried about are not worth the hassle of protecting against. More precisely, if an image library is susceptible in this way, it is the image library that should be fixed. As I mentioned in a preceding email, I think the recently-added `disabled' tag for image-toggle-display should be removed. I think we can leave the behavior where you have to type C-c C-c to display an image after entering image-mode; but we should provide an option (not enabled by default) to display images automatically upon entering image-mode, as before.