From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Brian Sniffen <bts@evenmere.org>
Cc: Matthew Lear <matt@bubblegen.co.uk>, notmuch@notmuchmail.org
Subject: Re: web interface to notmuch
Date: Thu, 19 Oct 2017 16:13:38 -0400 [thread overview]
Message-ID: <87infazyj1.fsf@fifthhorseman.net> (raw)
In-Reply-To: <FC013D0C-422E-4C73-BF9D-FEBD782A123E@evenmere.org>
[-- Attachment #1: Type: text/plain, Size: 1510 bytes --]
On Thu 2017-10-19 16:00:33 -0400, Brian Sniffen wrote:
> I don’t think they can be sanitized. Web tech moves so fast.
well, there are at least a handful of python modules that claim to do
some sort of sanitization.
in debian alone, we have at least:
python3-django-html-sanitizer
python3-feedparser
python3-bleach
python3-w3lib
so, one approach would be to just adopt one of them, and then it's their
fault if it breaks :)
I'm not saying it's a great approach, but it seems better than the
current situation where no sanitization is done at all.
> But maybe they can be isolated. GMail uses a separate domain for the
> content from the UI; I have hopes about response headers and iframe
> attributes.
That's an interesting approach too, though it doesn't isolate message A
from message B, which is a distinct concern. The worry isn't just that
the content could take over the UI, right?
Maybe isolation and sanitization can be used in combination? even if
neither of them are perfect, it'd be a damn sight better than pipermail
:P
> Also, if the whole site’s static—not just the nmweb part—you probably
> can’t hurt much.
depends on what kind of harm you're talking about -- i think the privacy
harms are potentially pretty serious. The public library is static, but
if reading one book meant that you ended up reporting on your future
reading habits (of any book) to some unknown third party, that would be
pretty bad.
--dkg
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]
next prev parent reply other threads:[~2017-10-19 20:46 UTC|newest]
Thread overview: 27+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-10-19 14:43 web interface to notmuch Matthew Lear
2017-10-19 15:01 ` Brian Sniffen
2017-10-19 16:55 ` Daniel Kahn Gillmor
2017-10-19 20:00 ` Brian Sniffen
2017-10-19 20:13 ` Daniel Kahn Gillmor [this message]
2017-10-21 20:00 ` Jani Nikula
2017-10-21 22:21 ` Daniel Kahn Gillmor
2017-10-24 12:39 ` Vladimir Panteleev
[not found] ` <27e53def-32b4-45ab-1192-77cc0e837a93@gmail.com>
2017-10-24 20:03 ` Matthew Lear
2017-10-25 22:03 ` Brian Sniffen
2017-10-26 21:25 ` Daniel Kahn Gillmor
2017-10-27 4:04 ` Brian Sniffen
2017-10-27 4:24 ` Daniel Kahn Gillmor
2017-10-27 10:02 ` Matthew Lear
2017-10-27 6:05 ` Daniel Kahn Gillmor
2017-10-27 17:52 ` Brian Sniffen
2017-10-31 17:13 ` Matthew Lear
2017-10-31 18:47 ` Tomas Nordin
2017-10-31 19:21 ` Brian Sniffen
2017-10-31 21:32 ` Matthew Lear
2017-11-01 13:01 ` Matthew Lear
2017-11-01 14:38 ` Brian Sniffen
2017-11-02 17:32 ` Matthew Lear
2017-12-06 15:00 ` Brian Sniffen
2017-12-06 19:13 ` Daniel Kahn Gillmor
2017-12-07 1:00 ` David Bremner
2017-10-20 19:25 ` W. Trevor King
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://notmuchmail.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87infazyj1.fsf@fifthhorseman.net \
--to=dkg@fifthhorseman.net \
--cc=bts@evenmere.org \
--cc=matt@bubblegen.co.uk \
--cc=notmuch@notmuchmail.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://yhetil.org/notmuch.git/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).