From: Ihor Radchenko <yantar92@posteo.net> To: rms@gnu.org Cc: Eli Zaretskii <eliz@gnu.org>, manikulin@gmail.com, 68687@debbugs.gnu.org, emacs-orgmode@gnu.org, stefankangas@gmail.com Subject: Re: bug#68687: [PATCH] Use text/org media type Date: Tue, 30 Jan 2024 12:13:47 +0000 [thread overview] Message-ID: <87mssn81dw.fsf@localhost> (raw) In-Reply-To: <E1rUfF4-00069N-Gu@fencepost.gnu.org> Richard Stallman <rms@gnu.org> writes: > I am concerned that the actions described above would tend to embed > Org format and Org mode more deeply into Emacs usage. > > Suppose A and B are Org users. If A knows this, and mails B a message > which contains text labaled as text/org, that won't make anyone > unhappy. No one would have a reason to complain. > > But what if C mails a message to D with text labeled as text/org and D > is not an Org user? Will that cause Emacs to load Org? It should > not. > What will Gnus do when the user readss a message with text labaled as > text/org? What will Rmail do? What will MH-E do? It may or may not depending on user customization `mm-inline-media-tests'. Just like with text/html, application/javascript, text/x-sh, images, etc. By default, for example, text/html gets rendered via shr.el (AFAIK). Do you think that shr.el should not be loaded (in (require 'shr) sense)? > These are crucial questions because the answers would determine > whether this feature pressures people to use Org mode or not. We need > concrete answers because only that would enable us to see cleary now > whether the feature would do that if in use. Even when text/org is rendered using Org mode, there is nothing pressuring people to use Org mode there. It is just visuals. Org major mode is not activated. Also, it is already what Emacs does for text/x-org. This patch is merely asking to treat text/org as text/x-org is already treated. > Max Nikulin <manikulin@gmail.com> wrote: > > Received or fetched Org > > files must be treated with some precautions, but it is another story. > > I was not aware of this issue. Let's look at it concretely now so we > can determine what its implications are. Have people already written > a list of these precautions? If so, I'd like to see it. Max is referring to various security issues with evaluating code inside Org mode buffers. They are known, but not relevant to Org text being displayed in email MUA - Org never evaluates any code automatically without user explicitly asking for it. And in MUA, Org mode is simply used to apply faces. No other interaction with the displayed text/org mime part is allowed. -- Ihor Radchenko // yantar92, Org mode contributor, Learn more about Org mode at <https://orgmode.org/>. Support Org development at <https://liberapay.com/org-mode>, or support my work at <https://liberapay.com/yantar92>
WARNING: multiple messages have this Message-ID (diff)
From: Ihor Radchenko <yantar92@posteo.net> To: rms@gnu.org Cc: 68687@debbugs.gnu.org, Eli Zaretskii <eliz@gnu.org>, emacs-orgmode@gnu.org, manikulin@gmail.com, stefankangas@gmail.com Subject: bug#68687: [PATCH] Use text/org media type Date: Tue, 30 Jan 2024 12:13:47 +0000 [thread overview] Message-ID: <87mssn81dw.fsf@localhost> (raw) In-Reply-To: <E1rUfF4-00069N-Gu@fencepost.gnu.org> Richard Stallman <rms@gnu.org> writes: > I am concerned that the actions described above would tend to embed > Org format and Org mode more deeply into Emacs usage. > > Suppose A and B are Org users. If A knows this, and mails B a message > which contains text labaled as text/org, that won't make anyone > unhappy. No one would have a reason to complain. > > But what if C mails a message to D with text labeled as text/org and D > is not an Org user? Will that cause Emacs to load Org? It should > not. > What will Gnus do when the user readss a message with text labaled as > text/org? What will Rmail do? What will MH-E do? It may or may not depending on user customization `mm-inline-media-tests'. Just like with text/html, application/javascript, text/x-sh, images, etc. By default, for example, text/html gets rendered via shr.el (AFAIK). Do you think that shr.el should not be loaded (in (require 'shr) sense)? > These are crucial questions because the answers would determine > whether this feature pressures people to use Org mode or not. We need > concrete answers because only that would enable us to see cleary now > whether the feature would do that if in use. Even when text/org is rendered using Org mode, there is nothing pressuring people to use Org mode there. It is just visuals. Org major mode is not activated. Also, it is already what Emacs does for text/x-org. This patch is merely asking to treat text/org as text/x-org is already treated. > Max Nikulin <manikulin@gmail.com> wrote: > > Received or fetched Org > > files must be treated with some precautions, but it is another story. > > I was not aware of this issue. Let's look at it concretely now so we > can determine what its implications are. Have people already written > a list of these precautions? If so, I'd like to see it. Max is referring to various security issues with evaluating code inside Org mode buffers. They are known, but not relevant to Org text being displayed in email MUA - Org never evaluates any code automatically without user explicitly asking for it. And in MUA, Org mode is simply used to apply faces. No other interaction with the displayed text/org mime part is allowed. -- Ihor Radchenko // yantar92, Org mode contributor, Learn more about Org mode at <https://orgmode.org/>. Support Org development at <https://liberapay.com/org-mode>, or support my work at <https://liberapay.com/yantar92>
next prev parent reply other threads:[~2024-01-30 12:11 UTC|newest] Thread overview: 59+ messages / expand[flat|nested] mbox.gz Atom feed top 2024-01-21 13:56 Org mode MIME type Max Nikulin 2024-01-21 15:11 ` Timothy 2024-01-22 16:21 ` Max Nikulin 2024-01-24 14:43 ` bug#68687: [PATCH] Use text/org media type Max Nikulin 2024-01-25 23:10 ` Stefan Kangas 2024-01-25 23:10 ` Stefan Kangas 2024-01-25 23:43 ` Ihor Radchenko 2024-01-26 7:40 ` Eli Zaretskii 2024-01-26 7:40 ` Eli Zaretskii 2024-01-26 14:00 ` Ihor Radchenko 2024-01-26 14:00 ` Ihor Radchenko 2024-01-26 10:52 ` Max Nikulin 2024-01-30 19:39 ` Stefan Kangas 2024-01-30 20:34 ` Ihor Radchenko 2024-01-30 20:34 ` Ihor Radchenko 2024-01-30 19:39 ` Stefan Kangas 2024-01-25 23:43 ` Ihor Radchenko 2024-01-26 7:23 ` Eli Zaretskii 2024-01-26 7:23 ` Eli Zaretskii 2024-01-26 10:39 ` Max Nikulin 2024-01-26 12:22 ` Eli Zaretskii 2024-01-31 16:30 ` Max Nikulin 2024-01-31 16:30 ` Max Nikulin 2024-01-27 3:38 ` Richard Stallman 2024-01-27 3:38 ` Richard Stallman 2024-01-28 16:35 ` Max Nikulin 2024-01-28 16:35 ` Max Nikulin 2024-01-28 16:47 ` Eli Zaretskii 2024-01-30 3:56 ` Richard Stallman 2024-01-30 12:13 ` Ihor Radchenko [this message] 2024-01-30 12:13 ` Ihor Radchenko 2024-01-30 17:12 ` bug#68687: Org mode code evaluation (was: bug#68687: [PATCH] Use text/org media type) Mike Kupfer 2024-01-30 17:12 ` Mike Kupfer 2024-01-30 17:51 ` bug#68687: " Ihor Radchenko 2024-01-30 17:51 ` Ihor Radchenko 2024-02-02 3:38 ` bug#68687: " Richard Stallman 2024-02-02 3:38 ` Richard Stallman 2024-02-02 4:58 ` bug#68687: Org mode code evaluation Max Nikulin 2024-02-02 4:58 ` Max Nikulin 2024-02-02 16:10 ` bug#68687: Org mode code evaluation (was: bug#68687: [PATCH] Use text/org media type) Ihor Radchenko 2024-01-31 16:18 ` bug#68687: [PATCH] Use text/org media type Max Nikulin 2024-01-31 16:32 ` Ihor Radchenko 2024-01-31 16:32 ` Ihor Radchenko 2024-01-31 16:18 ` Max Nikulin 2024-02-02 3:40 ` Richard Stallman 2024-02-02 3:40 ` Richard Stallman 2024-02-02 7:15 ` Eli Zaretskii 2024-02-02 7:15 ` Eli Zaretskii 2024-01-30 12:52 ` Eli Zaretskii 2024-01-30 12:52 ` Eli Zaretskii 2024-01-30 3:56 ` Richard Stallman 2024-01-28 16:47 ` Eli Zaretskii 2024-01-31 20:00 ` Stefan Kangas 2024-01-31 20:00 ` Stefan Kangas 2024-02-01 10:40 ` Max Nikulin 2024-02-01 10:40 ` Max Nikulin 2024-02-02 7:09 ` Stefan Kangas 2024-02-02 16:28 ` bug#68687: [PATCH v2] " Max Nikulin 2024-02-02 7:09 ` bug#68687: [PATCH] " Stefan Kangas
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=87mssn81dw.fsf@localhost \ --to=yantar92@posteo.net \ --cc=68687@debbugs.gnu.org \ --cc=eliz@gnu.org \ --cc=emacs-orgmode@gnu.org \ --cc=manikulin@gmail.com \ --cc=rms@gnu.org \ --cc=stefankangas@gmail.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index https://git.savannah.gnu.org/cgit/emacs.git https://git.savannah.gnu.org/cgit/emacs/org-mode.git This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.