From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id wH8FGlDPWGO3BQEAbAwnHQ (envelope-from ) for ; Wed, 26 Oct 2022 08:10:24 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id IHPGGVDPWGPFiQAAauVa8A (envelope-from ) for ; Wed, 26 Oct 2022 08:10:24 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2B40229EBE for ; Wed, 26 Oct 2022 08:10:24 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onZZn-0004R3-Jv; Wed, 26 Oct 2022 02:07:44 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onZZd-0003is-Fs for emacs-orgmode@gnu.org; Wed, 26 Oct 2022 02:07:33 -0400 Received: from mail-oi1-x234.google.com ([2607:f8b0:4864:20::234]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1onZZZ-0002vI-Rh for emacs-orgmode@gnu.org; Wed, 26 Oct 2022 02:07:32 -0400 Received: by mail-oi1-x234.google.com with SMTP id n83so17316916oif.11 for ; Tue, 25 Oct 2022 23:07:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:mime-version:references:in-reply-to :from:from:to:cc:subject:date:message-id:reply-to; bh=+mdxS1dvK6g4ygq8ToIW3GTsrLLFsd4Qfm/R+4oqgng=; b=bAWh02fha+TTfFc7HVJ8hs2t5c3ycQa2Rpy8dCLXstUWiKkRy8Div02oeYJJa5/UFW xMK2Hjt6Ap4rbjik6JbCtNuH+HU85725wamhihcnMI9EtSmgM61SqEryoSO0P2/dqqCd 1NeqF7/gwOpRbzEYFy5kdPITdk2kCTwQR5eVIDTd5dX9oAkbHCcCnZujgSZFznruT++N +gzqy4M4xWVC+sHWF2IIrEK58+sY3bh074JoDBWJUBD0ABUNjjWcTAQY6sZIzMV+CnxT Nnw6gXx/6pRZ7Eic9TiMG4mOO4gArgTx6scKQdXY8C1tUm0gtebvFFuZMOdk2WxLcfuu c7UQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:mime-version:references:in-reply-to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=+mdxS1dvK6g4ygq8ToIW3GTsrLLFsd4Qfm/R+4oqgng=; b=gu702qzlBzHKQd/6Gv/6o0SYlVzecT32PG8MqkbY7ZSjXJ8xOf4YcaKQUZaZb3A8mH f1OBnHrEo68ks8DeQmd9Wc6mIqI+pG+ZXVX1Aq9x8LSCsjcF/LyagNsKp4Z+cf7poBoD cuqVK8SKIWleBCzMiQavIP4VkeOmUuo2fGsgqaLSoNAVwJLJxN2Hwl3qnUrMNB6r2K39 wAzoLH1T7v6Ft4JV6MT8L57DhZ4qDoNlOGqVxl+DhjMauVQJ3+xp632peBwKGe+Stvpn /SDVL1roOL5YArCjzrrHNYTm0EZKY+ZrbITgJrURB3J9PWxY5r3P1QOxCiWiRjH+ZUsR GpPA== X-Gm-Message-State: ACrzQf0acRpiiX4IFJ/3b3ddAxIJ0rPq7G7ejeh4cYSIPFyAdhxx8rGz TZ4rIBPbmTJHE2cFnaIWkxfHDVoaGPG5BAJq0ds= X-Google-Smtp-Source: AMsMyM4iD4hTB0PkrH6yJ1PBu6kPiOFTCt3Au8p7EqEA2s+FkbCv6zNfNe1cD8JpX9KJr0EeL89p21MQxMXwiooPFyQ= X-Received: by 2002:a05:6808:1186:b0:353:b77a:a481 with SMTP id j6-20020a056808118600b00353b77aa481mr1021786oil.199.1666764448428; Tue, 25 Oct 2022 23:07:28 -0700 (PDT) Received: from 753933720722 named unknown by gmailapi.google.com with HTTPREST; Tue, 25 Oct 2022 23:07:27 -0700 From: Stefan Kangas In-Reply-To: <87v8o7qzff.fsf@localhost> References: <86bkq0qf8p.fsf@protected.rcdrun.com> <87bkq0t03l.fsf@web.de> <87v8o7qzff.fsf@localhost> X-Hashcash: 1:20:221026:yantar92@posteo.net::9slSG+HfU4WTtHJP:888G MIME-Version: 1.0 Date: Tue, 25 Oct 2022 23:07:27 -0700 Message-ID: Subject: Re: bug#58774: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly To: Ihor Radchenko , "Dr. Arne Babenhauserheide" Cc: 58774@debbugs.gnu.org, emacs-orgmode@gnu.org, bugs@gnu.support Content-Type: text/plain; charset="UTF-8" Received-SPF: pass client-ip=2607:f8b0:4864:20::234; envelope-from=stefankangas@gmail.com; helo=mail-oi1-x234.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Emacs-orgmode" Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1666764624; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=+mdxS1dvK6g4ygq8ToIW3GTsrLLFsd4Qfm/R+4oqgng=; b=hdYGvred3CV22OUdvpcaAP8Xtq6B4RbKaJSaG1i1QlWtdGng0HG+Ghi5XWl1NpeREUvRG8 aAANpduDdQdjLAhUVz/SnZLG4JfBlrFBia00se5oeXxvAmoVtUR9xEGN8jm9grlX5Bsk10 eCnQHerJMKNo561HnKSp7jluBlvQVLOUcKVvc3fLrPdTwfZcx2dkUYCIl6h9VjdbFDUdAA LgGDGrB2tFnO2WTqZvI4bZ8av0jJ0DJMF/RiKdpD9tr9opjTAnAddYCdnKKabLPvaYvJZ7 xD3Wzefq974NBZhgg7LvL1t+RrqqreIkf/CnS1+JRFheXX/0XYNyZ09fekYIvQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1666764624; a=rsa-sha256; cv=none; b=f7440EqxptX1YsbwRofnz/4U1BhlS77qtwkat62LdBhz4hJAqCYwx/vyN1iok7OnZ7LzXq J21qZnE8fLkUXQxKiIl/3BGvxo3YfxeA2V8/fMRTxmRoJs6fjvJbVUc2ln9POehipAY6rH KySGYV7us8qLtLWSRGObaBrArPfvH1+qrBRfrKdi0Ari3QTha31T/Ve7H5laFz8DvpBAOm qpZylKV6IlfsqR0bc6aRUXN8D22pQCyDj2HfHf3PDQ0KeAbC7ccA5bjpba5Y+Uy4B4qVwy w6YnlVbk2G4T10h1UOCWP7uI+rK0GDDBKWRC1dMfccptz8csYvhjfazZPps96g== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=bAWh02fh; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -7.41 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=bAWh02fh; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 2B40229EBE X-Spam-Score: -7.41 X-Migadu-Scanner: scn0.migadu.com X-TUID: MIgKaFpJSd31 Ihor Radchenko writes: > The "problem" with shell links you are describing is a question of > setting variables and is also disabled by default. > > eww-mode, when loading Org page, could simply set > org-link-shell-confirm-function to its default value. Note that with the suggested feature, any link you follow risks being loaded in Org mode, before the user even has a chance to inspect the file. Which Org features, currently existing or introduced in the future, would EWW have to add workarounds for? It is very hard to foresee which parts of Org will be problematic and have to be disabled. See the security vulnerability in enriched-mode that prompted the release of Emacs 25.3, for example. Adding this opens a can of worms that will expose unsuspecting users to a whole class of new problems. And the only benefit is to save some users from having to type "M-x org-mode RET", or adding call to a suitable hook. All in all, this seems like a bad trade-off. So I don't think we should add such a feature.