From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 4GmvOMNdh1+6aQAA0tVLHw (envelope-from ) for ; Wed, 14 Oct 2020 20:21:23 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id cFZzNMNdh1+9MAAA1q6Kng (envelope-from ) for ; Wed, 14 Oct 2020 20:21:23 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6A1739400C7 for ; Wed, 14 Oct 2020 20:21:22 +0000 (UTC) Received: from localhost ([::1]:57802 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kSnGz-0000eG-Ay for larch@yhetil.org; Wed, 14 Oct 2020 16:21:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52324) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kSnEY-0007eN-RM for emacs-orgmode@gnu.org; Wed, 14 Oct 2020 16:18:50 -0400 Received: from mail-io1-xd2b.google.com ([2607:f8b0:4864:20::d2b]:38824) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kSnEW-0000MQ-Ds for emacs-orgmode@gnu.org; Wed, 14 Oct 2020 16:18:50 -0400 Received: by mail-io1-xd2b.google.com with SMTP id y20so816784iod.5 for ; Wed, 14 Oct 2020 13:18:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:subject:message-id:date :to; bh=y/PiSwxujhV21SRLD9EHxAHg+UvMtX2N8XHnrmp7Jzo=; b=cwx6GoeB3FaFIdGbHjQ1Swj0YxhkxGxDJ4FQPa0nZvr/iNoxJSQN3cd1byjTZinKAm /cKkicIFuc2pcEjRLXrjIYHHbXLSsycZ6SneTrCorNchvycZfKd1Dir5jRZ3xULOp8JU 4BCKbh/3g5+StLkQRvRnJ5Witk1ei2RAksqSApG9GXd5dCOiw9rME11rFsRQge4Avq24 mcvUHRos3ewR5vOka7SulAiP7L5LVU8Ev0nHaoJAziJl3bhapOrPd9CrJxIkEMDHqE8h 4RNDAgg/707kzrNlZB41iA/Fx6C7ARTlla/bpZfcULgC2VXNRFNxjLUR3BOYTp8Xy0yD UBFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:to; bh=y/PiSwxujhV21SRLD9EHxAHg+UvMtX2N8XHnrmp7Jzo=; b=t5HWWsugtjMVXeqvKeB6xaXDY3DSH8Ib0ZJONrL51tr7CKhLjPRhcolVUx0XzREo1n c/OM83Sn3a7dxUy09BEco8ClxRh5/NxjzpWDYEFcF/mekW52r3xmp4MGAi+o0i3H0oaV n7fqxIel41XYOaCjOLONx7tkzC8cCByDkmnI2X8mBbaqXw/5DK0rIsKspHQuSj2nOQaZ DJdT/RrSb88+ay3C43Wjb+UfMTM3TNi8DptwWlSBIRskLnR4LxQenewpgIcRCJXOyKcu AKa8Q5KQAxdvq7QNMSzf79F+voiqNplKQ9Cyvk2UCvemh4iuRM2igTFeNZaafTFKPmpY vkRA== X-Gm-Message-State: AOAM530GdKze3fgCu+BZvfaqHkA9h2AlQe9oILKTjXEB6m9CdTCgQooP uOTqTdh+syU16rXzUMVSfL96ljfZsGQ= X-Google-Smtp-Source: ABdhPJxwt2JNCIZQ3ABhc6imon6LQij+3jBuq5esdEUYADw5883bGjR+oSBAvwnzQRBGMAKfdqo6Nw== X-Received: by 2002:a6b:7f43:: with SMTP id m3mr905666ioq.114.1602706725860; Wed, 14 Oct 2020 13:18:45 -0700 (PDT) Received: from ?IPv6:2601:86:300:1800:2081:e20:4e65:470c? ([2601:86:300:1800:2081:e20:4e65:470c]) by smtp.gmail.com with ESMTPSA id q23sm555661iob.19.2020.10.14.13.18.45 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 14 Oct 2020 13:18:45 -0700 (PDT) From: =?utf-8?B?5ZC06ZSQ5oms?= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Subject: Confusion about org-confirm-babel-evaluate's behavior while exporting lob calls Message-Id: <5362C0A0-632F-4C87-8FA1-915F0F53D8B8@gmail.com> Date: Wed, 14 Oct 2020 16:18:44 -0400 To: emacs-orgmode@gnu.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Received-SPF: pass client-ip=2607:f8b0:4864:20::d2b; envelope-from=ywwry66@gmail.com; helo=mail-io1-xd2b.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -17 X-Spam_score: -1.8 X-Spam_bar: - X-Spam_report: (-1.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=cwx6GoeB; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Spam-Score: -1.21 X-TUID: p7Cqu+8PQEx+ Hi, I have org-confirm-babel-evaluate set to t by default. With this, I = expect to be queried with the execution of every code block or lob call. = However, this does not happen when exporting lob calls (to latex for = example). Here is an example: ______________________________________ 1. Exporting code block (with evaluation) #+name: foo #+begin_src emacs-lisp :exports both (message "hello world!") #+end_src When exporting this to latex, I get queried as expected. And there is no = way to suppress the query unless I change org-confirm-babel-evaluate to = nil. 2. Exporting lob call #+name: foo #+begin_src emacs-lisp (message "hello world!") #+end_src #+call: foo() When exporting this to latex, I don=E2=80=99t get queried. This seems = dangerous to me. ______________________________________ I find it hard to explain this inconsistency. If = org-confirm-babel-evaluate is designed to be a protective layer, then a = user might export an org file that includes malicious code along with a = lob call, while unawarely execute that code without being warned. This = seems to defeat the purpose of org-confirm-babel-evaluate. As I searched the archive, I found this change was introduced in the = following thread: = https://lists.gnu.org/archive/html/emacs-orgmode/2013-04/msg00764.html + (let (org-confirm-babel-evaluate) + (org-babel-execute-src-block nil info)))))))))) Do you think this is the intended behavior of = org-confirm-babel-evaluate, or am I missing something? Thanks, Ruiyang