From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: "Dr. Arne Babenhauserheide" Newsgroups: gmane.emacs.orgmode,gmane.emacs.bugs Subject: Re: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly Date: Tue, 25 Oct 2022 17:02:18 +0200 Message-ID: <87bkq0t03l.fsf@web.de> References: <86bkq0qf8p.fsf@protected.rcdrun.com> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="31540"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.8.9; emacs 28.1 Cc: bug-gnu-emacs@gnu.org, emacs-orgmode@gnu.org To: Jean Louis Original-X-From: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane-mx.org@gnu.org Tue Oct 25 17:07:37 2022 Return-path: Envelope-to: geo-emacs-orgmode@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1onLWj-00080B-0T for geo-emacs-orgmode@m.gmane-mx.org; Tue, 25 Oct 2022 17:07:37 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onLVU-0005mD-M7; Tue, 25 Oct 2022 11:06:20 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onLVT-0005SG-7c; Tue, 25 Oct 2022 11:06:19 -0400 Original-Received: from mout.web.de ([212.227.15.3]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onLVP-0002KH-Lh; Tue, 25 Oct 2022 11:06:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=s29768273; t=1666710339; bh=GfJYVM+HLnVEFextFj9eEsKUv8w5yzhQDHeBOcGnjgk=; h=X-UI-Sender-Class:References:From:To:Cc:Subject:Date:In-reply-to; b=DPNk4MoeeCEIZlItLhkbjXFAFOQA3Yqk9wDMMcTwTr6R9dk374PfGnlhcjqWWYVTA CyQ7Ogr5SxTaRAbk8rFvPb9Rq45SVSOCZNf1nNxNBaXXB7dxLRZh1EihPBrFTFDd7U Fsk/gmn1fUs5IAA930IqPGu6Cpvcd/TFDNcyYL+zvvPP/ETdh/2+dsRZPg93IF8R94 FJyso1CiNNWOPkK5Y40R6+1zdATx4Lgh9M7M2lMZPfdEv89TVj4W7hn37y+W0M8mOL lwv64bi32zOEa/0VT2LNLQqkT5aUOqIA1lFUwf6sYVJ3eub2LUA1rnOKnBJOgS/bIR Pi0J8SAhAjMKw== X-UI-Sender-Class: 814a7b36-bfc1-4dae-8640-3722d8ec6cd6 Original-Received: from fluss ([84.165.20.127]) by smtp.web.de (mrweb006 [213.165.67.108]) with ESMTPSA (Nemesis) id 1MpU1w-1pRqnO3lTI-00q8LG; Tue, 25 Oct 2022 17:05:38 +0200 In-reply-to: <86bkq0qf8p.fsf@protected.rcdrun.com> X-Provags-ID: V03:K1:48U5rl6cqKaI4M3FaJCEZY+hu+6MQ7/4KaDV2ycKtD+9BB2giAB 4c/bWqX3a3FsH3Z6oed34WjZ5rzopt2OWYGpoqPdmjg9HnnyFEv0B1KCSFzUIsbdZIezuW7 tvRVfUjolPHlsrkceQydOQTZH1TxFgCvmEQhEFMZYRU9vAAromzLx28xuLpFqNsizGmVb0X V8q7Mo/1CeIejOd8YBqqA== UI-OutboundReport: notjunk:1;M01:P0:pCiwu6MDPSM=;QC4u0G7o8jvnPRnLokGqd30vHFM O99T+yiPQONrDqEc+fbSZoLSFnxFJvjNR9KJHNTfOugVbrIb4IUROnCx+tp0WnZLUpnBt7MMI SPx+saCo3MwLWkCHz0aJhbkNOR7JnSR/dR8JiXLslw1AIU4dNkfMGKFfI6qGIdliP2KZEIYbK Nh7iR+X6DyHJIsZhsD2J6IrBGvkTEn13Iqcar4zk6IkIFMMTJBXqVMWEUk9S5C085lGfR338a 0SIQlY7+hulG18WOwemt8EdpFIMT8SE7CFdwVFUbJrbSVaAmaOdgJTvcsTWWATSPXVPYHjIpi HesfgnkpBNWnRMezJ4uoJpiMvxQy2dRcYf78HdOvmHxc1RKkpPciFtqoAzlIIlXw3Zf20hOfE w8ak6stShZf3pWbt/LddVJ6MwBIsKp/a0PQ0M0eilbKYlQdw5rBG6JtCghGaB7A0ixey3QAfZ hWru3TZH5rOWjN0ul1KZbz7tY5TlxWbDD20DoLB6MLBHdAo1TZRKznzIq4d46Ceb581mCmjMf Q6GH56N6K2OgPuZImdjXI85ls3FPVNxQUuCUGu2a0TEA/0hhp6J87VGrIw+2tLz7R06l0qthq 4wFQMuCsrOGcWRHXLGoL1RyB/Na2oecg5hH+HUOUyjOauap2FynqWbcGxGJA9FyY4C/suB4el H7v50Bb81BVYmji2V4SXadOnctJcUa1LzElMngjgCImbMZqe0yJohRet33v1kTFionjfdqRFM UmL6Y3qfpp88Pl3F+93w9O85FpBU2hTnY/OkJJe1AvjD1u+wSAPXXr/MexXpdUZB/YTbHe4r Received-SPF: pass client-ip=212.227.15.3; envelope-from=arne_bab@web.de; helo=mout.web.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: "Emacs-orgmode" Errors-To: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.orgmode:149871 gmane.emacs.bugs:246156 Archived-At: --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Jean Louis writes: > This wish request is related to Emacs EWW and Org mode. > > Please make EWW recognize Org file when served by WWW server. Currently > it does not recognize the MIME type text/x-org and opens the file as > text, it does not invoke the org mode. In my opinion, it should. This sounds dangerous. Org mode can execute untrusted code, so this could trick people into running untrusted code with the permissions of their Emacs. Links in org-mode can run shell scripts. Yes, they usually ask, but this may be changed it a local Emacs, trusting that it will only be used to open trusted local files. The threat model of eww changes a lot when any file on the web can request being opened with org-mode. Best wishes, Arne =2D-=20 Unpolitisch sein hei=C3=9Ft politisch sein, ohne es zu merken. draketo.de --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE801qEjXQSQPNItXAE++NRSQDw+sFAmNX+0EQHGFybmVfYmFi QHdlYi5kZQAKCRAT741FJAPD6xW/D/9DAKlg8gaVSzxFPledtcLFbUqhOLXX4Ard ZkabAzrUIuhGKLFsCS62PQ02eeXMEjB4M0ZTWNbrF0M7ieZeKqxwvrCImmAqxyd7 dP4y5xruGf0juc+USmnqBic04pNRvCEBXz7NB99KVDZP7eo5DSKV85zEoYLFoq8s L1RhDhvkMn78BIJjNjh5phoHUla4d0BBsmOYiUw4tHBzLuTrgIo/M97EN7N2iTDm kGlQgsXC+0rt2wuZl0u2bF3ti/Tg0c0aTNxe9O5JFcaL9tbY1ZwOXXZ5yF9FHQRH kEDrlANHw50lT1lgS08WRQH/8YfyNEJ5oqrAwzTtsBfzve/zml3d+/cND4J3gWd7 lawa2G1cMgVfxb9uPB9tgUiRmxTjjS9X607DpmrtOM0NMHE1wmY/0EBh/JahVhXb eEc4xTh6yPE9kGbLew1m6o/pgk7bv7JMUP5P2Jeu0xZvIBUO3ZJljOJpuDBI3W3+ BOkD78DCCkUUhXUgz3r5J/ALggDRSnYmteEwxoVF6BibbFIdQwcAG/lt7NniJ7zB /aKzPtmQbSw/M9NuGazUsUMSJUXoD+YOp/bgpGBYO6qm7Tp2IxJIkW6fvaFESXSw vlXmpPRwNqrYbrkmfsL360pgawrEedb+ZcqOl/G5HkQe06hYfBNGUqMZEUWiJYYp zW1+CRrXzojEBAEBCAAuFiEE3Si95tmHXKvOSosd3M8NswvBBUgFAmNX+0EQHGFy bmVfYmFiQHdlYi5kZQAKCRDczw2zC8EFSEDnA/9ZTofaV1gd4O6ealumNAVBa5mk EYY/erzD9Xyt3ou7zMkPmtARgRghXvIEm601ZavOp0st/+2Ba6o0af7/MD72jRBE bhhnss71NykK5fZsn3YuovURfMQevByD7wkZlaPes9xneKJn0O01MoOSJI1M3IvQ uAK4tJ1x/Sf9xiYy6Q== =IwA2 -----END PGP SIGNATURE----- --=-=-=--