From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id cPTvFDSrfmeYhwAA62LTzQ:P1 (envelope-from ) for ; Wed, 08 Jan 2025 16:43:32 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id cPTvFDSrfmeYhwAA62LTzQ (envelope-from ) for ; Wed, 08 Jan 2025 17:43:32 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=O7jBZTfh; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1736354612; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=oV+EpphQn0oxncu5UbIgioKEgrpTZ1E/pa8kO2j+9pw=; b=BirQPTbVjy35dnuC4oToklXgD/vqyL/TaXm69TFJEvdxUZhePHdEIevuJMNwfWzq0BX5Eq PWL4zWiyXycp34yZEFZaL8CpzhGN91i2AGjKxqqGB4f5zfkSB8P8OtzlJ16fPp+YT9R96k hoakCjUe959N3L911pKDTrzpDOtuoU+Vanp4QITF7FY0aMpCEt2oZNNLPjS3s1ITCYGUto KY7zx/oP0GQ81hWsDI885yrkeTaKtrmvm5Sml8wcAURwKTUPlKWa4pLrHoofrPeWIb/lvN A3x5vXFh1dSNVfqZr1EuOwrVTDZ179fDrYXul/OP26GQ5YMDWLTzTOdXisqnGQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=O7jBZTfh; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1736354612; a=rsa-sha256; cv=none; b=ibVogx50n1ri0BORw/c0VIdy+6yMRpgfmt6+KfhCkkYvlMd6zO60fwZS9RyDA5qYOMtqjE tqhqGMKiPuguVTej0KWr7ETRITpPRK6Hww1WOizjWX8rHFjm9cUYv6UX7PUSYgHNVqtoRL Jl8kBQ6wvqTtXtxTNrB/NhtzDCRB+95N9Jtkh0dgwFR1K7eFLIRsLZBtwCrDdKqleEBQR+ StNf0dFvBZCaV4IKqqBCwrfujSf5OLslsdl13ovLz+kA5tG9XXl5lyJlA5jLJrEy74paTn p0JLZkzdiNJ5o8d7HcrNPs41MG8qRYL6K0VmNdpCLz3mLZoT1Szh5NkvtxCmHw== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id C355378093 for ; Wed, 08 Jan 2025 17:43:31 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tVZ8e-0005H3-0U; Wed, 08 Jan 2025 11:42:36 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tVZ8Y-0005Gl-2z for emacs-orgmode@gnu.org; Wed, 08 Jan 2025 11:42:30 -0500 Received: from mail-lj1-x236.google.com ([2a00:1450:4864:20::236]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tVZ8W-00039t-9E for emacs-orgmode@gnu.org; Wed, 08 Jan 2025 11:42:29 -0500 Received: by mail-lj1-x236.google.com with SMTP id 38308e7fff4ca-30227c56b11so3811831fa.3 for ; Wed, 08 Jan 2025 08:42:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1736354544; x=1736959344; darn=gnu.org; h=content-transfer-encoding:in-reply-to:mail-followup-to:cc:to:from :content-language:references:subject:user-agent:mime-version:date :message-id:sender:from:to:cc:subject:date:message-id:reply-to; bh=oV+EpphQn0oxncu5UbIgioKEgrpTZ1E/pa8kO2j+9pw=; b=O7jBZTfhDQbm7fsTm4N8CfiFQ8X1RZ9GACliJ/Q0YdDQck4coCjafQ93pm61jF2REw V7EOjbVotXn/4cKEPYD4MW0Htpy0x3VZj48KDUtV5I6bhZneKHryW6WJZu9DV7EFMTS0 B5pru/Uj6kO13rQAyndesuu5nz+HTfqNIw1w3DMHYS2NoGYcZYPohZfKoG+3s2qB+fUt E4KCd4qtrseLsI91UQrAD1F5/AfdovLYlSdi6irzWLnuECrdBSVOqvVJMBpZVrBhSsLa GAVRiWJrhqWmd/RGNsPEO0tiM+iLdBlYquxPHyaQe7L03NL479vT2vSYjbE38IVCxwo/ rGpg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736354544; x=1736959344; h=content-transfer-encoding:in-reply-to:mail-followup-to:cc:to:from :content-language:references:subject:user-agent:mime-version:date :message-id:sender:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=oV+EpphQn0oxncu5UbIgioKEgrpTZ1E/pa8kO2j+9pw=; b=Lp9hurgvtQFSg0y+ufQATPu0gWjb1zr5muo7xob9zRQvXqnjjPvvqesqdU8GRgO09b Hv/xmTkhE8ZTFib6mtQvgHdOuHW+mCZbrgy5Iw7Z7tmKFrcjeFNPWOGQx9CjVJFPZ0Hm FcNUK5T9Z5UO96wlV3wVHj/9OFswwZEi1Zl0S6jgECGN7PIuqGdrW8ldI9jzqmk6/1Ed 8Jzf30vDdBUoozNfeD0S0qW0JttH/UlBhBwM6uJ7r0Nb5q068hsU47Yrr4sqzXnVcSIk R1K4aVcBByX2jEo1yJhW/R7JieINDxyek4rbMVFaSl6iw2DUetIICu4Ff1I3S7IDS9h6 4FZw== X-Gm-Message-State: AOJu0YztzDuZvsPIyQMKHkGKJFyygiDJKC4V0sZ13vO8LIYi02h6zJAI r+AgCujsjWAlXtkLpH1ZAuw7OiU7uGkfZRcAW2IlAh9T/RxWKzcNodEZFg== X-Gm-Gg: ASbGncvT5H5s12XLcE2gfoAcUrUPwbQO4dXKUKxhUTIR5jcjzY6cI+l2mFJ2+QmTeGF Sx7btgic6ITSXq2VDrJtBlJRIpIdrBeiPT9XGU6iZxAKIz7gK0vHep2xpgDwoMH6mKovp8IRYFB 8tjU/M8uiofEH0tP2/5lmwZhUSPAilvwVUWqBA4JeayWoN9GkZv7JFETGthYkW3qlFlnJ4VNE0F /ABko1EPUcS4jTRm9ykWxfrK0WFfG9QUk/KFlyz2rIyBuh006+oLMX1/uvIUZ0sR3VeckDgaIgu 0kU= X-Google-Smtp-Source: AGHT+IGic34IingEv3BnyOhsiUXhOi6wPb8p2CUjyiAVk39Q6EVRGheGxPlh0dnyimZ1piAW7skQDg== X-Received: by 2002:a05:651c:a0b:b0:302:40ec:a1b3 with SMTP id 38308e7fff4ca-305f45a0a29mr9759221fa.21.1736354543540; Wed, 08 Jan 2025 08:42:23 -0800 (PST) Received: from [192.168.1.149] (nat-0-0.nsk.sibset.net. [5.44.169.188]) by smtp.googlemail.com with ESMTPSA id 38308e7fff4ca-305d59ab9dasm14252791fa.64.2025.01.08.08.42.22 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 08 Jan 2025 08:42:23 -0800 (PST) Message-ID: <9a215224-2952-4540-a8fa-9d922a7ae397@gmail.com> Date: Wed, 8 Jan 2025 23:42:22 +0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Org-protocol browser extensions avoiding use of bookmarklets References: <87pllx7219.fsf@gmail.com> <877c7jq5dz.fsf@gmail.com> <9b2e7d75-e415-4629-9cac-23d3c11d4d10@gmail.com> <8734huij8u.fsf@gmail.com> Content-Language: en-US, ru-RU From: Max Nikulin To: emacs-orgmode@gnu.org Cc: Rehan Deen Mail-Followup-To: emacs-orgmode@gnu.org, Rehan Deen In-Reply-To: <8734huij8u.fsf@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: pass client-ip=2a00:1450:4864:20::236; envelope-from=manikulin@gmail.com; helo=mail-lj1-x236.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: C355378093 X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: 0.63 X-Spam-Score: 0.63 X-TUID: fSlKIkxRcjgq On 08/01/2025 01:14, Rehan Deen wrote: > I just came across this extension: > > https://www.reddit.com/r/emacs/comments/1hvtlsa/the_new_and_only_orgprotocol_chrome_extension_you/ > > https://addons.mozilla.org/en-US/firefox/addon/emacs-paw/ > > Do you think this meets some of your needs and avoids the security > issues you've raised? The code has not been published yet and I have no motivation to extract it from the .xpi file. I have not tried it in action since I am not inspired by the description. I do not like popups over page text. My extension is not ideal, but it covers my use case (quite different from "paw"). In Firefox, the add-on likely request permission for an org-protocol handler on behalf of itself and it is OK. In Chrome it depends on API used by the extension. I am against granting the permission to web sites, in addition it is annoying to confirm intention for every site. Ideally, extension should escape characters in page titles and selected text that may be considered as Org markup. Otherwise there is a chance to unintentionally execute some code. It requires some user interaction, but e.g. TAB is used too often. As to a bug for changed bookmarklet behavior in Firefox, there is almost no chance that I will file it since I do not use this feature.