From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: indieterminacy Newsgroups: gmane.emacs.bugs Subject: bug#58774: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly Date: Wed, 26 Oct 2022 23:56:31 +0200 Organization: Icebreaker Message-ID: <6134bfe5e5d0b971035406385af683e8__3343.20464623801$1666829835$gmane$org@libre.brussels> References: <86bkq0qf8p.fsf@protected.rcdrun.com> <87bkq0t03l.fsf@web.de> <87v8o7qzff.fsf@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="40359"; mail-complaints-to="usenet@ciao.gmane.io" To: Max Nikulin , Stefan Kangas , 58774@debbugs.gnu.org, emacs-orgmode@gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Thu Oct 27 02:17:07 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1onqa2-000AFs-5R for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 27 Oct 2022 02:17:06 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onqUF-00011S-5V; Wed, 26 Oct 2022 20:11:07 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onqUB-0000xf-Up for bug-gnu-emacs@gnu.org; Wed, 26 Oct 2022 20:11:04 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1onqUB-0004Jr-Ls for bug-gnu-emacs@gnu.org; Wed, 26 Oct 2022 20:11:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1onqUB-0004dp-HH for bug-gnu-emacs@gnu.org; Wed, 26 Oct 2022 20:11:03 -0400 X-Loop: help-debbugs@gnu.org Resent-From: indieterminacy Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 27 Oct 2022 00:11:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 58774 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: wontfix Original-Received: via spool by 58774-submit@debbugs.gnu.org id=B58774.166682942817779 (code B ref 58774); Thu, 27 Oct 2022 00:11:03 +0000 Original-Received: (at 58774) by debbugs.gnu.org; 27 Oct 2022 00:10:28 +0000 Original-Received: from localhost ([127.0.0.1]:55567 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1onqTb-0004cc-JP for submit@debbugs.gnu.org; Wed, 26 Oct 2022 20:10:27 -0400 Original-Received: from libre.brussels ([144.76.234.112]:33692) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1onoO6-0001Kq-4P for 58774@debbugs.gnu.org; Wed, 26 Oct 2022 17:56:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=libre.brussels; s=mail; t=1666821391; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=poXQm1LtcweBhBuyo4DGtuT35nYgR+0P1LIbPZcve94=; b=fnwWgjbG7RWE7bsrr4d8RlfB209nPVUP/dmLoigaZVXm7TYjJIRgil5cvvZN+TUdIeIXOQ ITuNqQ4QGobCkjhgFwVs4+LW9fI/2Q9LYXGfk6WSUab+u0f37Tpv0cDkiJl1DXzn6IATYl az25+eJYMfFbmOA0cx6Rrc+Giej09UI= In-Reply-To: X-Sender: indieterminacy@libre.brussels X-Mailman-Approved-At: Wed, 26 Oct 2022 20:10:17 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: "bug-gnu-emacs" Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:246263 Archived-At: On 26-10-2022 20:37, Jean Louis wrote: > > I do not have special opinion of "publishing Org files" for unknown > people, if such people are not member of the group. That would require > training them to know what is Org mode, and finally why? Emacs is poor > general browser tool. > > Greatest benefit of Org files being served and properly parsed by > Emacs by using HTTP is personal and group based. It is not mainly for > public use. > > But one could think of it being analogous to Gemini. > > https://gemini.circumlunar.space/ > > Public who does not use Emacs will not be interested in such. > > They may download Org files and open it from file system. Same > insecurity exists by downloading them and opening them. > Just typical that Id raise Gemini just as you bring it up yourself (so many mails to sift through) :) >> Sometimes Org developer and maintainers do not have enough resources >> to react to security-related reports. An issue not so dangerous in >> the current state becomes really weird if Org mode becomes a default >> handler for files fetched from net. > > Your interpretation is improper, as you mentioned "default handler for > files fetched from net" -- and I was very specific, for text/x-org > content type that EWW get possibility to invoke org mode on such > files. > > Quite logical. Emacs, Org mode and EWW, those shall work together. I > am surprised that it does not. > > At least Russian Nginx WWW server supports me as user to configure it > so to serve Org files as text/x-org. > > Though personally I have already found buggy solution with Emacs Lisp > modification to eww render function. I must improve it. > It is worth emphasizing that Gemini is conventionally designed to serve and receive files in isolation and that browsers are not expected to do anything beyond recognising the simple types of lines. As such ceteris paribus Id like to thing that it should operate to minimise threats of vulnerabilities such as spreadsheets being used to interact with banking services. Besides, the size and range of Gemini browsers and clients met with the size of these tools - combined with the acutal size of the Gemini community (let alone their competence grade) would make it a low priority for troublemakers to prioritise. -- Jonathan McHugh indieterminacy@libre.brussels