From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id kLEDLvvuWGP0swAAbAwnHQ (envelope-from ) for ; Wed, 26 Oct 2022 10:25:31 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id iMg2LfvuWGMALQAAG6o9tA (envelope-from ) for ; Wed, 26 Oct 2022 10:25:31 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7BC263D0E3 for ; Wed, 26 Oct 2022 10:25:31 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onbfk-00024N-8h; Wed, 26 Oct 2022 04:22:00 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onbfX-0001iw-UJ for emacs-orgmode@gnu.org; Wed, 26 Oct 2022 04:21:49 -0400 Received: from stw1.rcdrun.com ([217.170.207.13]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onbfR-0002Ki-5J for emacs-orgmode@gnu.org; Wed, 26 Oct 2022 04:21:45 -0400 Received: from localhost ([::ffff:197.239.4.142]) (AUTH: PLAIN admin, TLS: TLS1.3,256bits,ECDHE_RSA_AES_256_GCM_SHA384) by stw1.rcdrun.com with ESMTPSA id 0000000000081D92.000000006358EE13.00005F36; Wed, 26 Oct 2022 01:21:38 -0700 Date: Wed, 26 Oct 2022 11:21:10 +0300 From: Jean Louis To: Stefan Kangas Cc: Ihor Radchenko , "Dr. Arne Babenhauserheide" , 58774@debbugs.gnu.org, emacs-orgmode@gnu.org Subject: Re: bug#58774: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly Message-ID: Mail-Followup-To: Stefan Kangas , Ihor Radchenko , "Dr. Arne Babenhauserheide" , 58774@debbugs.gnu.org, emacs-orgmode@gnu.org References: <86bkq0qf8p.fsf@protected.rcdrun.com> <87bkq0t03l.fsf@web.de> <87v8o7qzff.fsf@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline In-Reply-To: User-Agent: Mutt/2.2.7+37 (a90f69b) (2022-09-02) Received-SPF: pass client-ip=217.170.207.13; envelope-from=bugs@gnu.support; helo=stw1.rcdrun.com X-Spam_score_int: -17 X-Spam_score: -1.8 X-Spam_bar: - X-Spam_report: (-1.8 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_SBL=0.141, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Emacs-orgmode" Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1666772731; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=NfPuouGVcLIrBTlKwpIZxNK3zOKB7tw6GbW3UQbYlyM=; b=sYu2KEdsp4wGr3rr1ZXeCI51KQIfJ3mFKWwNdSo1gxt2vukgk9MCrPczezRZstfZqjxWUR TByKoF8VwjD2QK9nqoHcmNFtBRYG/xecSpyF2BS2QN/itkzZVxchxxYM24u/3ljQz1ZgXZ f6kehGmi2Foq28wLtUeuWAD7e8yQ1W7cgAxo7JkPMZkN/yEGe1fu5tRSqcpa17KOFh1neF E1qcq8lxz1N2KYEV4cwZsjkkMNPKuaYWDXuNBTyTI9hhb8fy6RtvCgz0DJUdrA89gq1vIv KZOavJxz4yTCxmieBfNHY75Mdeh9zOZNSJjfkhFU1o5c40GgrTo7NVi2ADYcBg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1666772731; a=rsa-sha256; cv=none; b=MZwU7tkeDm25KcC2RFdMt2clPBDXdl0QEXtGly3sZIgYZk1fiD6IZGmDJUhtwaA9WjmTIt gfGHKJnQLttaU3rJvmE4EWy+u706EaqkkpSTurhMqLyuSjSyz4bFLL4EnD9fus3xTKHklL NPZrAsRuhP0cKfA6HGN/+vgwft4miPqUeorQi+8lyqZXqzGi13SKNve3j8d7eeTPKzhoY7 BFoICIBdXdylngdwcjvsE1uSwNUpLxbuVe9NTjHnyN6AOZ/4PHJ1ytue3k+o/tXYjs34nh F2z5KQeagQPU015kKZRhcU53OeN3H40+6jrKx8nlDxxhQBZhlNV2E9msF8uApQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 0.59 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 7BC263D0E3 X-Spam-Score: 0.59 X-Migadu-Scanner: scn1.migadu.com X-TUID: jSK1cKLEoZ5n * Stefan Kangas [2022-10-26 09:08]: > Ihor Radchenko writes: > > > The "problem" with shell links you are describing is a question of > > setting variables and is also disabled by default. > > > > eww-mode, when loading Org page, could simply set > > org-link-shell-confirm-function to its default value. > > Note that with the suggested feature, any link you follow risks being > loaded in Org mode, before the user even has a chance to inspect the > file. See my previous e-mail to Arne and explanation that in almost any browser, it is user's choice on how to open various content types. It implies, there are numerous risks involved, and users customizing their browsers have responsibility for their computing. Does user need group of people to dictate what is safe and what is not safe? That is contrary to free software principles, let users decide how they wish to open their files. I maybe have Common Lisp on my server and wish to open it with SBLC on my computer. That is my choice. Let me have that choice in EWW, which is native to Emacs for Org mode, which is native to Emacs. It is natural. Note that I can open Org files with other browser. But I wish to browse my Org notes directly from within Emacs , and not just invoke external browser, which in turn invokes again `emacsclient'. That works well already. I hope you understand it. > Which Org features, currently existing or introduced in the > future, would EWW have to add workarounds for? Only to recognize content type text/x-org and invoke Org mode. And let users decide if to invoke org mode on content type "text/x-org". I am even now convinced that I should be able to customize how to open various content types, but I do not get it. I was thinking eww will recognize at least mailcap file, as in email client I open Org files without problems. I see in eww.el that there is function `mailcap-view-mime' but I do not see it is used to recognize my mailcap file where I have this line: text/x-org; edit %s; nametemplate=%s.org; my "edit" script invokes emacsclient > It is very hard to foresee which parts of Org will be problematic and > have to be disabled. See the security vulnerability in enriched-mode > that prompted the release of Emacs 25.3, for example. There is no need to disable anything by default please, leave that to user choice. I can open ALL kinds of files from WWW servers and decide how to open them. That was since beginning of Internet user's choice. It is not up to browser to tell me I should not open specific content type, or for browser to disable how I view or use the file. - EWW is browser - it shall recognize content-type - it shall then invoke ANY application by users' choice for that content-type Maybe I wish to open text/x-org with mousepad editor, so let me do that. Maybe I wish to invoke different Emacs instance, let me do that. If I wish to isolate the Emacs instance I can isolate it without problems, but that shall be my users' choice. Sample method of isolation of browser on single computer: (defun browse-safe-url (url &optional arg) "Browse URL with b" (let ((username "joedoe")) ;; different username than my own ;; Insecurity settings for personal DISPLAY only (shell-command "xhost +") ;; Browse URL with different username (async-start-process "sudo" "sudo" nil "su" "-c" "--" username "-c" (format "exec iceweasel \"%s\"" url)))) > Adding this opens a can of worms that will expose unsuspecting users to > a whole class of new problems. It does not. Review well customization of content types on various browsers, it existed since beginning of WWW. Browser is not for HTML only, there are many content types. > And the only benefit is to sapve some users from having to type "M-x > org-mode RET", or adding call to a suitable hook. It is not only benefit. Every browser shall give option to users to decide how to open any content type. > All in all, this seems like a bad trade-off. So I don't think we should > add such a feature. What if I want to open Gnumeric spreadsheet with eww? You do not want to add that feature? Help me open Gnumeric spreadsheet by using eww and its content type by customization, and I will not ask you to open Org by eww, because at that point of time I will be able to customize how to open Org content type myself. -- Jean Take action in Free Software Foundation campaigns: https://www.fsf.org/campaigns In support of Richard M. Stallman https://stallmansupport.org/