From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id uHRmNR1lRGa+BAEAqHPOHw:P1 (envelope-from ) for ; Wed, 15 May 2024 09:32:46 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id uHRmNR1lRGa+BAEAqHPOHw (envelope-from ) for ; Wed, 15 May 2024 09:32:45 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=ushin.org header.s=key1 header.b=us4E4pqg; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=quarantine) header.from=ushin.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1715758365; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=4nI5r9Hlphmba+kiYDQ1keLSOaLuqomTSJmTLL+OywU=; b=JKLaqIzKYR2DMtz9d2yIA50jIPg3xcDhIufX0UmGLxGYajZr71w2jjmkk0s2wBnHK0Wl9I b25in7vbPHrbw/YwfYzg2VL5RoD+HHoiHa1al9Kkbcs4gKEVeOzHh4KhW3bHPFa03OEpZt KihHJfN1X4rYDKtqm7DEdsmLZ4lhGvewd7Xl2dVPwnK+JNvG++EGT6yNO+Syeh8OYdvO+c VpwwLHnijYqkzGWOqeNW2XgWe0x1c4Vi8mNUOeeo6ueVsx37hECfwhJZpQTcuQKpMnaLRR hwj2OYxASHPpr7F++FYVOk2UtRMCzgpgIeeymt1ajdWPnH4aL06mnn4dQZ6cxg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=ushin.org header.s=key1 header.b=us4E4pqg; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=quarantine) header.from=ushin.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1715758365; a=rsa-sha256; cv=none; b=le1rzeJuuljdAPf68L0zvIV1eReh8VkxT0Exam55fb9xhjEPr/Mel1wvOap5uoCZlNQ2rd PaDb54Jj2EEqJ1mArO5Ct3KL+kQ6BYmgNHXgXZCEcTcWiLGOmwDqcUpoVF6/jbd1ivaDPJ 6J+WKQ4ziS7skDZRxEu82j0ha/BVpfUWtXaI4Dysp6OcO2GgeKOlcwIPAeDkmYJwLVrVwx NAZLBki+s61aMaTy4yR3Y2lvjKl2gKOCZMVHrGoflyDCqMYkh3d40HQrH8NHZPvGqExsvs 5WcFe6eMYFxU9tdaHjr75haMO8z7bHx6CciDqkfSjnCzsYN1bKpqcJnw67s4sQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6BE776EB8D for ; Wed, 15 May 2024 09:32:45 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s797C-0000c9-5L; Wed, 15 May 2024 03:31:54 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s796y-0000bP-QS for emacs-orgmode@gnu.org; Wed, 15 May 2024 03:31:41 -0400 Received: from out-171.mta0.migadu.com ([91.218.175.171]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s796u-0007DR-Dp for emacs-orgmode@gnu.org; Wed, 15 May 2024 03:31:40 -0400 X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ushin.org; s=key1; t=1715758291; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=4nI5r9Hlphmba+kiYDQ1keLSOaLuqomTSJmTLL+OywU=; b=us4E4pqg9lYsUmPTl02Zt/YhrW5+P/4MgYpgA2y+r1bTSD2n/Jkq0EwNhenCF1OXtdIOYv Mi0xsRruKYYivfvlcaujsoHRtfxfvFyKcDA/KiHueOOzsJWcZ+zlCYN4ZA9YUOrMkYKMYW slbDut4MBAEHLT+JTnpNS9Y3LNeftMviUq9F4kHhhtWE+wusfWYW5Lwjoq3OZ3iGy+5R+y M6lXi3yqvsyzLm3ARg+O9J330tfZ8nlyHvWuUT1XqyoQqUvbVreWSj7PuiClNE5LkFlU69 dVtmzgE5iYUtZWFIFZcyHC/uauixHSgrTS47C/74VO1ErlNVTZpWK6+lLw78Zg== From: Joseph Turner To: Ihor Radchenko Cc: Org Mode Mailing List , Adam Porter , Jonas Bernoulli , Protesilaos Stavrou Subject: Re: Using search options in HTTP-style links In-Reply-To: <87il09rwr8.fsf@localhost> (Ihor Radchenko's message of "Mon, 22 Apr 2024 20:02:51 +0000") References: <871q77ugcf.fsf@ushin.org> <8734rm7sp0.fsf@localhost> <87il0fpqp5.fsf@ushin.org> <87il09rwr8.fsf@localhost> Date: Wed, 15 May 2024 00:31:26 -0700 Message-ID: <87wmnvzg35.fsf@ushin.org> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=91.218.175.171; envelope-from=joseph@ushin.org; helo=out-171.mta0.migadu.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -9.90 X-Migadu-Queue-Id: 6BE776EB8D X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -9.90 X-TUID: MHb0GmccVd04 Ihor Radchenko writes: > I was mostly talking about commands like eww - I simply recall a similar > proposal being made about activating Org mode when the URL points to Org > file. That proposal has been rejected on the grounds of security. See > https://debbugs.gnu.org/cgi/bugreport.cgi?bug=58774 > > The case with hyperdrive.el is not the same. > You may want to discuss it on emacs-devel. Thank you! It is a good idea to get more input on securing hyperdrive.el. For now, I went through bug#58744 and took some notes in two relevant hyperdrive.el issues: - https://todo.sr.ht/~ushin/ushin/178 - https://todo.sr.ht/~ushin/ushin/178 > As for untrusted-content, there is no point using it now - it was > specifically introduced for Org mode. It may or may not become a part of > more general security framework in Emacs. Sounds good. Thank you!! Joseph