From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id yLUEFEVaqGLFQAAAbAwnHQ (envelope-from ) for ; Tue, 14 Jun 2022 11:52:05 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id OM7vE0VaqGJLTQAA9RJhRA (envelope-from ) for ; Tue, 14 Jun 2022 11:52:05 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 006413FEAC for ; Tue, 14 Jun 2022 11:52:05 +0200 (CEST) Received: from localhost ([::1]:44360 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o13DP-0007D3-OH for larch@yhetil.org; Tue, 14 Jun 2022 05:52:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:48470) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o1322-0007qq-Rv for emacs-orgmode@gnu.org; Tue, 14 Jun 2022 05:40:19 -0400 Received: from mail-wm1-x334.google.com ([2a00:1450:4864:20::334]:38566) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o131w-00007i-Tg for emacs-orgmode@gnu.org; Tue, 14 Jun 2022 05:40:18 -0400 Received: by mail-wm1-x334.google.com with SMTP id m39-20020a05600c3b2700b0039c511ebbacso5891443wms.3 for ; Tue, 14 Jun 2022 02:40:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:mime-version:content-transfer-encoding; bh=1uTB+n6yCcfkyi0QMVHA81g2VZgmE2UWYUOdPkNfsnI=; b=UwM1QRcC0GxMUD7tT0LqNWnzniPlvAS2Akhm0GCsjiZjZsLYoIyLzRBK5x4CGbPdLu JR86CwTFoLhPoQT5xr0G+GC3rWdOs5psJB2AO3f0HPwZRo8I+fIzBOpr0J11tLsyvw3U eln9nPTdIkoTCaHhb97MVt7qQKqU7Gffl2yypsAHv3zm1wtBu0SgnHd3zDt0I779LCnu jtXE1MyQqn5k+EkOflc1740PVyM6Sll6vqhgGV/Xbndj3lFoHaCUOqm4pMFsGkJJgYLU RDGzGCJSgy8HJ70oz7Gmlv0CPn3oWuyDqbZG7IvgX8vVFGyxECsfKxt3pFb61VSO8koG vXqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:mime-version :content-transfer-encoding; bh=1uTB+n6yCcfkyi0QMVHA81g2VZgmE2UWYUOdPkNfsnI=; b=m6/WLsnhNJb3RCpP2oEerBvr9Mzk9Hzm4yhb34B/qHfuO6TJl9gA1I+URZm+iCetMm dmS9g0ZYlXkJCPMWZGflq/x9Tv8Nz6CvS+KAKWWlcWItEnj0X6nVXxKz78BXylDp859M xvnl8dAupHN59MDTKaX/lzihMdnQsU09fqTo4rZIPzmL67esLvLwxF7Coj010WzIfP1M 0QqM1RaTKYvNLuK+8hhPI/YVh2hYVCgsPmhEXhaNVXC0XQrVgCwcfBGMY14cAIRoQZ3X TFDr0xI4+okN8HoLvH5NfDmuvvwKnIHlEIKDu/xnx9Z1EDw6MIyO+rjzUtgKwSlXYVj5 k/Sg== X-Gm-Message-State: AOAM533yb0LD0+xMxg0hiAKiGwRzgzBU00ih1kUX0gUS9HI9K9eQ1DqN Krxvqrepmt5adWv7RkJsYIXsw92dYgw= X-Google-Smtp-Source: ABdhPJztuplBYMSx8oPYTz1167O/cOftKkYjSsPEe+r7COhn+sUDibt5whBwosCqMq/+sP1c0Os07g== X-Received: by 2002:a7b:c413:0:b0:39c:37cc:b0fe with SMTP id k19-20020a7bc413000000b0039c37ccb0femr3032142wmi.11.1655199610884; Tue, 14 Jun 2022 02:40:10 -0700 (PDT) Received: from rltb ([2a01:e0a:3f3:fb50:c43e:652:64b6:8eb]) by smtp.gmail.com with ESMTPSA id z6-20020a05600c220600b0039c5642e430sm12191088wml.20.2022.06.14.02.40.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 14 Jun 2022 02:40:10 -0700 (PDT) From: Robert Pluim To: Timothy Cc: emacs-orgmode@gnu.org Subject: Re: [PATCH] New remote resource download policy References: <87mteiq6ou.fsf@gmail.com> Gmane-Reply-To-List: yes Date: Tue, 14 Jun 2022 11:40:09 +0200 In-Reply-To: <87mteiq6ou.fsf@gmail.com> (Timothy's message of "Sun, 12 Jun 2022 22:43:07 +0800") Message-ID: <878rpzzipy.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::334; envelope-from=rpluim@gmail.com; helo=mail-wm1-x334.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, T_SPF_HELO_TEMPERROR=0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1655200325; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=1uTB+n6yCcfkyi0QMVHA81g2VZgmE2UWYUOdPkNfsnI=; b=RrJvKb1UOI113jyPfORQU5IsJyP4cGoYlhY9ySwTy13RUNvDKmXJI0pUS0rtHxXxuinBHo vHQBSObtvi/j87Eddrqq0C89PepABu5R/4eR1uM/6FLCA33xuCNPSSGPDLFoUo4f0jska3 RZ/IeAZ5bNaR75EgzQ90PXeCaQPns2NJQfAYkWQe2xgmWlc/DJ0m1ct2BaZmkZAjL+ssVH dZYH4pHzlEfA4Wf2blbyv1rNzT75L0SzNLqhFMhq0TEMQmkfcbA+luw5DCzrWAxoYWTVg1 JiK7z2efOGvJ/a4uPSWN9y58mrsBeowjBwhoBNbXAbwpI2TjE1AUW/NYJMfj2g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1655200325; a=rsa-sha256; cv=none; b=iUrMifwM4OYtd2VF6ejMMnqykuGS5qanNPGi7OkwNnHY2pg372mlYlFNVyj8IuObAQuJcz VEfSczr+VG3tKPKv73L2ty7jEcE/lK/QdJdxLUqUuukQu73AKafOang5XKUTHELn0aciuB XVAybuOQwfHYGQYyKVyKWxACqghQ6PrjZl8uILQi56AavtTDHGMihrb4JRQBCabxfICo3v Mf2MzxrftyCGa4MFD/u0LYVWsv5O0jF2acd8n0Di44wuUNTspZk2Ivlp0FyjX5vT1mvpqA ts2kW4L7D3Dsjn9PGH24Y6l6DJ0KIDo2QlZ6MNeefTTxBby2RSwuF4KoqSuGdg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=UwM1QRcC; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.99 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=UwM1QRcC; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 006413FEAC X-Spam-Score: -3.99 X-Migadu-Scanner: scn1.migadu.com X-TUID: svLtwRZTIZW4 >>>>> On Sun, 12 Jun 2022 22:43:07 +0800, Timothy said: Timothy> Hi All, Timothy> As was raised in the `#+include: URL' thread Timothy> (), current= ly Org will Timothy> automatically download files without confirmation in various c= ircumstances. Timothy> This patch introduces two variables to control Org=E2=80=99s a= ttitude towards Timothy> downloading files, and hooks them into the relevant parts of t= he codebase. I think that would be a good addition.=20 =20 Timothy> +(defcustom org-download-remote-resources 'prompt Timothy> + "The policy applied to requests to obtain remote resources. Timothy> + Timothy> +This affects keywords like #+setupfile and #+incude on export, Timothy> +`org-persist-write:url',and `org-attach-attach' in Timothy> +non-interactive Emacs sessions. Timothy> + Timothy> +This recognises four possible values: Timothy> +- t, remote resources should always be downloaded. Timothy> +- prompt, you will be prompted to download resources nt consi= dered safe. 'prompted when downloading unsafe resources' maybe? Does this need a 'prompt-always option? I guess that=CA=BCs what you get with the default value of `org-safe-remote-resources', but maybe it makes sense to be explicit? Robert --=20