From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Ihor Radchenko Newsgroups: gmane.emacs.bugs Subject: bug#58774: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly Date: Thu, 27 Oct 2022 23:20:08 +0000 Message-ID: <87zgdgn9av.fsf__11849.0281443641$1666912944$gmane$org@localhost> References: <86bkq0qf8p.fsf@protected.rcdrun.com> <87y1t0or6q.fsf@web.de> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="10514"; mail-complaints-to="usenet@ciao.gmane.io" Cc: 58774@debbugs.gnu.org, Max Nikulin , emacs-orgmode@gnu.org To: "Dr. Arne Babenhauserheide" Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri Oct 28 01:22:16 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ooCCV-0002Vo-QR for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 28 Oct 2022 01:22:15 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ooCAO-0005Sx-Py; Thu, 27 Oct 2022 19:20:04 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ooCAN-0005Ry-7O for bug-gnu-emacs@gnu.org; Thu, 27 Oct 2022 19:20:03 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ooCAM-0005VV-VJ for bug-gnu-emacs@gnu.org; Thu, 27 Oct 2022 19:20:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ooCAM-0006Z5-Pk for bug-gnu-emacs@gnu.org; Thu, 27 Oct 2022 19:20:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Ihor Radchenko Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 27 Oct 2022 23:20:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 58774 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: wontfix Original-Received: via spool by 58774-submit@debbugs.gnu.org id=B58774.166691278125195 (code B ref 58774); Thu, 27 Oct 2022 23:20:02 +0000 Original-Received: (at 58774) by debbugs.gnu.org; 27 Oct 2022 23:19:41 +0000 Original-Received: from localhost ([127.0.0.1]:59697 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ooCA0-0006YI-Os for submit@debbugs.gnu.org; Thu, 27 Oct 2022 19:19:41 -0400 Original-Received: from mout02.posteo.de ([185.67.36.66]:38841) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ooC9y-0006Y0-0c for 58774@debbugs.gnu.org; Thu, 27 Oct 2022 19:19:39 -0400 Original-Received: from submission (posteo.de [185.67.36.169]) by mout02.posteo.de (Postfix) with ESMTPS id 3B107240101 for <58774@debbugs.gnu.org>; Fri, 28 Oct 2022 01:19:29 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1666912772; bh=gL1SiaWC8TqqovOmN8EnMRqqFKhJUhxtdXV3/kPYf7o=; h=From:To:Cc:Subject:Date:From; b=LJVCjEZtgcbCTe+2RAEajxADxPFtfbxvTz+G7T+9g6Y/X0CL811khkbOo80iPuN/A 5f3anaTykkgTR8YuqSn1dSVtLq5RSlKTNx/KhLxDxXGbsTs0XUzxmdBtCvUa2ZfRNB hWjGYZihCEveAulKxIPyZW9QQLS4VDsq9SPx1DLkciLTrwK8wVRzgnUDJdmCO3sG6T iSDLe905WF/52zQ6AiMnyJ47vrHRbRyQA1+GePDiz3Qkw1HDtDJqTIBMckGTAMLc4a j75X9yvZCI4dS3h/vvIgSV0pGVBjiGGKunzv/bicjDvLgT0EPES5aWp9sivQeg9AH1 BzxERyzJqYzsg== Original-Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4Mz1pj4Kznz6tmH; Fri, 28 Oct 2022 01:19:25 +0200 (CEST) In-Reply-To: <87y1t0or6q.fsf@web.de> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: "bug-gnu-emacs" Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:246381 Archived-At: "Dr. Arne Babenhauserheide" writes: > Max Nikulin writes: > >> How are you going to distinguish your personal files and arbitrary >> files from non-trusted sources? By signing your files and maintaining >> list of trusted certificates? > > One idea that could work well is to add an explicit allow-list > trusted-sources-to-allow-unsafe-modes with entries of domain and > path-prefix where people can add trusted sources. > > If for example my server were draketo.de,=C2=B9 I could set this list to > > '(("https://www.draketo.de" "/software")) > > and when I would then open a link like > > https://www.draketo.de/software/advent-of-wisp-code-2021.org > > with eww, it would directly switch to org-mode. > > > If, however, I would open the link > > https://draketo.de.evil.attacks/software/advent-of-wisp-code-2021.org > > with eww, it would display it as plain text, because it would not be in > the list of trusted sources. I am a bit lost about the aim of this tread, but let me share some existing remote resource controls we have employed on the latest Org: (defun org--should-fetch-remote-resource-p (uri) "Return non-nil if the URI should be fetched." (defun org--safe-remote-resource-p (uri) "Return non-nil if URI is considered safe. This checks every pattern in `org-safe-remote-resources', and returns non-nil if any of them match." (defun org--confirm-resource-safe (uri) "Ask the user if URI should be considered safe, returning non-nil if so." You can check the implementation at https://git.savannah.gnu.org/cgit/emacs/org-mode.git/tree/lisp/org.el#n4540 --=20 Ihor Radchenko // yantar92, Org mode contributor, Learn more about Org mode at . Support Org development at , or support my work at