From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id INjQGLr7V2OhXAAAbAwnHQ (envelope-from ) for ; Tue, 25 Oct 2022 17:07:38 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id GPbtF7r7V2PHDAEAG6o9tA (envelope-from ) for ; Tue, 25 Oct 2022 17:07:38 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 491AA2FB64 for ; Tue, 25 Oct 2022 17:07:37 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onLVU-0005mD-M7; Tue, 25 Oct 2022 11:06:20 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onLVT-0005SG-7c; Tue, 25 Oct 2022 11:06:19 -0400 Received: from mout.web.de ([212.227.15.3]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onLVP-0002KH-Lh; Tue, 25 Oct 2022 11:06:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=s29768273; t=1666710339; bh=GfJYVM+HLnVEFextFj9eEsKUv8w5yzhQDHeBOcGnjgk=; h=X-UI-Sender-Class:References:From:To:Cc:Subject:Date:In-reply-to; b=DPNk4MoeeCEIZlItLhkbjXFAFOQA3Yqk9wDMMcTwTr6R9dk374PfGnlhcjqWWYVTA CyQ7Ogr5SxTaRAbk8rFvPb9Rq45SVSOCZNf1nNxNBaXXB7dxLRZh1EihPBrFTFDd7U Fsk/gmn1fUs5IAA930IqPGu6Cpvcd/TFDNcyYL+zvvPP/ETdh/2+dsRZPg93IF8R94 FJyso1CiNNWOPkK5Y40R6+1zdATx4Lgh9M7M2lMZPfdEv89TVj4W7hn37y+W0M8mOL lwv64bi32zOEa/0VT2LNLQqkT5aUOqIA1lFUwf6sYVJ3eub2LUA1rnOKnBJOgS/bIR Pi0J8SAhAjMKw== X-UI-Sender-Class: 814a7b36-bfc1-4dae-8640-3722d8ec6cd6 Received: from fluss ([84.165.20.127]) by smtp.web.de (mrweb006 [213.165.67.108]) with ESMTPSA (Nemesis) id 1MpU1w-1pRqnO3lTI-00q8LG; Tue, 25 Oct 2022 17:05:38 +0200 References: <86bkq0qf8p.fsf@protected.rcdrun.com> User-agent: mu4e 1.8.9; emacs 28.1 From: "Dr. Arne Babenhauserheide" To: Jean Louis Cc: bug-gnu-emacs@gnu.org, emacs-orgmode@gnu.org Subject: Re: 29.0.50; [WISH]: Let us make EWW browse WWW Org files correctly Date: Tue, 25 Oct 2022 17:02:18 +0200 In-reply-to: <86bkq0qf8p.fsf@protected.rcdrun.com> Message-ID: <87bkq0t03l.fsf@web.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Provags-ID: V03:K1:48U5rl6cqKaI4M3FaJCEZY+hu+6MQ7/4KaDV2ycKtD+9BB2giAB 4c/bWqX3a3FsH3Z6oed34WjZ5rzopt2OWYGpoqPdmjg9HnnyFEv0B1KCSFzUIsbdZIezuW7 tvRVfUjolPHlsrkceQydOQTZH1TxFgCvmEQhEFMZYRU9vAAromzLx28xuLpFqNsizGmVb0X V8q7Mo/1CeIejOd8YBqqA== UI-OutboundReport: notjunk:1;M01:P0:pCiwu6MDPSM=;QC4u0G7o8jvnPRnLokGqd30vHFM O99T+yiPQONrDqEc+fbSZoLSFnxFJvjNR9KJHNTfOugVbrIb4IUROnCx+tp0WnZLUpnBt7MMI SPx+saCo3MwLWkCHz0aJhbkNOR7JnSR/dR8JiXLslw1AIU4dNkfMGKFfI6qGIdliP2KZEIYbK Nh7iR+X6DyHJIsZhsD2J6IrBGvkTEn13Iqcar4zk6IkIFMMTJBXqVMWEUk9S5C085lGfR338a 0SIQlY7+hulG18WOwemt8EdpFIMT8SE7CFdwVFUbJrbSVaAmaOdgJTvcsTWWATSPXVPYHjIpi HesfgnkpBNWnRMezJ4uoJpiMvxQy2dRcYf78HdOvmHxc1RKkpPciFtqoAzlIIlXw3Zf20hOfE w8ak6stShZf3pWbt/LddVJ6MwBIsKp/a0PQ0M0eilbKYlQdw5rBG6JtCghGaB7A0ixey3QAfZ hWru3TZH5rOWjN0ul1KZbz7tY5TlxWbDD20DoLB6MLBHdAo1TZRKznzIq4d46Ceb581mCmjMf Q6GH56N6K2OgPuZImdjXI85ls3FPVNxQUuCUGu2a0TEA/0hhp6J87VGrIw+2tLz7R06l0qthq 4wFQMuCsrOGcWRHXLGoL1RyB/Na2oecg5hH+HUOUyjOauap2FynqWbcGxGJA9FyY4C/suB4el H7v50Bb81BVYmji2V4SXadOnctJcUa1LzElMngjgCImbMZqe0yJohRet33v1kTFionjfdqRFM UmL6Y3qfpp88Pl3F+93w9O85FpBU2hTnY/OkJJe1AvjD1u+wSAPXXr/MexXpdUZB/YTbHe4ry Y5Xxa34IdVk6An5+rHwSfdPaVlSM7Oi57+Xh2LI2eV5vXjI8Cc5HEctAZD9dPTMrwJPOjVTcY tu0hVyIVVzsxTvCuDqKEx/WdOAmQt1oclJrz2EnN/IGwjQcyYlREWR01NrPZg2MyZm2HAvA6+ GFM4W/1ZL0FCAKAcZa1Lxw1UQxA= Received-SPF: pass client-ip=212.227.15.3; envelope-from=arne_bab@web.de; helo=mout.web.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Emacs-orgmode" Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1666710457; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=GfJYVM+HLnVEFextFj9eEsKUv8w5yzhQDHeBOcGnjgk=; b=rGcMaPwcWUGb4kjcremoRSleuBrR7F/sjC36xYUOpvX6/cUIJNtxaEHzdMy0DoHsQG5Pe7 199JWqqNskSM7UVDT6dlyriRfYQvbkY4bRUN8RhpfbPABuVZfu434LyskWajsh+ejg2bNq XsZ4VS7RWdkIbMOlJTVa6u7l3cP/KsIHM1F5s5Yf3gjZX+m2M5TwSIIZEQYzYJlOSH7x8+ 43YTjvj9LXstAbToOWHVQu1tgH/s9Qp5bB4sLTDb/n0DluetHo1ITuUiRp5aNzshxhkaWR SpQ6g1UyIOqgId8YrtLSC8tmGzTBTmjG+C/ysvG1kX9loZPHz5GismEYMf1pKQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1666710457; a=rsa-sha256; cv=none; b=VzMGj8iz7mW/86hZke6dtN+CRLA+kYNM2xPO1CPPgLS9p+GOJ4XweK3GLRRyKgPmQo0Cff J72UE7WWp9P1+LxbM5pOWJKQKxvMY11AMObeYpavIsJ96HczgRkXnSlbUmofa/yQ3U9hfa aoFbmGGkVTS/8d3pVhdkDJxqJ+ygWEFN99x7nVlPLJLhmVpI7W1k9rIy5uJIj3Sdzs+T5p NicttRapgdLRsOwzKR8DCivMj/ZAJW/Iup6smCw/XDxoKmIaMF0y4vzLdEZKh6XTCFsPF1 4gIZWKUrPYjDuJq8Up73YN1kF6ifQ/4iEw8pNkER7+Bq5n8sT27r2vq5cqiFJg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=web.de header.s=s29768273 header.b=DPNk4Moe; dmarc=pass (policy=none) header.from=web.de; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -10.11 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=web.de header.s=s29768273 header.b=DPNk4Moe; dmarc=pass (policy=none) header.from=web.de; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 491AA2FB64 X-Spam-Score: -10.11 X-Migadu-Scanner: scn0.migadu.com X-TUID: V5UNuNDYTihI --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Jean Louis writes: > This wish request is related to Emacs EWW and Org mode. > > Please make EWW recognize Org file when served by WWW server. Currently > it does not recognize the MIME type text/x-org and opens the file as > text, it does not invoke the org mode. In my opinion, it should. This sounds dangerous. Org mode can execute untrusted code, so this could trick people into running untrusted code with the permissions of their Emacs. Links in org-mode can run shell scripts. Yes, they usually ask, but this may be changed it a local Emacs, trusting that it will only be used to open trusted local files. The threat model of eww changes a lot when any file on the web can request being opened with org-mode. Best wishes, Arne =2D-=20 Unpolitisch sein hei=C3=9Ft politisch sein, ohne es zu merken. draketo.de --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE801qEjXQSQPNItXAE++NRSQDw+sFAmNX+0EQHGFybmVfYmFi QHdlYi5kZQAKCRAT741FJAPD6xW/D/9DAKlg8gaVSzxFPledtcLFbUqhOLXX4Ard ZkabAzrUIuhGKLFsCS62PQ02eeXMEjB4M0ZTWNbrF0M7ieZeKqxwvrCImmAqxyd7 dP4y5xruGf0juc+USmnqBic04pNRvCEBXz7NB99KVDZP7eo5DSKV85zEoYLFoq8s L1RhDhvkMn78BIJjNjh5phoHUla4d0BBsmOYiUw4tHBzLuTrgIo/M97EN7N2iTDm kGlQgsXC+0rt2wuZl0u2bF3ti/Tg0c0aTNxe9O5JFcaL9tbY1ZwOXXZ5yF9FHQRH kEDrlANHw50lT1lgS08WRQH/8YfyNEJ5oqrAwzTtsBfzve/zml3d+/cND4J3gWd7 lawa2G1cMgVfxb9uPB9tgUiRmxTjjS9X607DpmrtOM0NMHE1wmY/0EBh/JahVhXb eEc4xTh6yPE9kGbLew1m6o/pgk7bv7JMUP5P2Jeu0xZvIBUO3ZJljOJpuDBI3W3+ BOkD78DCCkUUhXUgz3r5J/ALggDRSnYmteEwxoVF6BibbFIdQwcAG/lt7NniJ7zB /aKzPtmQbSw/M9NuGazUsUMSJUXoD+YOp/bgpGBYO6qm7Tp2IxJIkW6fvaFESXSw vlXmpPRwNqrYbrkmfsL360pgawrEedb+ZcqOl/G5HkQe06hYfBNGUqMZEUWiJYYp zW1+CRrXzojEBAEBCAAuFiEE3Si95tmHXKvOSosd3M8NswvBBUgFAmNX+0EQHGFy bmVfYmFiQHdlYi5kZQAKCRDczw2zC8EFSEDnA/9ZTofaV1gd4O6ealumNAVBa5mk EYY/erzD9Xyt3ou7zMkPmtARgRghXvIEm601ZavOp0st/+2Ba6o0af7/MD72jRBE bhhnss71NykK5fZsn3YuovURfMQevByD7wkZlaPes9xneKJn0O01MoOSJI1M3IvQ uAK4tJ1x/Sf9xiYy6Q== =IwA2 -----END PGP SIGNATURE----- --=-=-=--