From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id iGwbO3LAql9SUwAA0tVLHw (envelope-from ) for ; Tue, 10 Nov 2020 16:31:46 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id 6DbmNnLAql+saAAAbx9fmQ (envelope-from ) for ; Tue, 10 Nov 2020 16:31:46 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 536DF9402B4 for ; Tue, 10 Nov 2020 16:31:46 +0000 (UTC) Received: from localhost ([::1]:46186 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kcWYa-0007P1-82 for larch@yhetil.org; Tue, 10 Nov 2020 11:31:44 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:38736) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kcWX4-0007Oi-Oc for emacs-orgmode@gnu.org; Tue, 10 Nov 2020 11:30:10 -0500 Received: from static.214.254.202.116.clients.your-server.de ([116.202.254.214]:34632 helo=ciao.gmane.io) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kcWX2-0004QK-Th for emacs-orgmode@gnu.org; Tue, 10 Nov 2020 11:30:10 -0500 Received: from list by ciao.gmane.io with local (Exim 4.92) (envelope-from ) id 1kcWWz-0006E3-Fa for emacs-orgmode@gnu.org; Tue, 10 Nov 2020 17:30:05 +0100 X-Injected-Via-Gmane: http://gmane.org/ To: emacs-orgmode@gnu.org From: Maxim Nikulin Subject: Re: Thoughts on the standardization of Org Date: Tue, 10 Nov 2020 23:29:59 +0700 Message-ID: References: <877dqujj9t.fsf@gmail.com> <193258.1604981615@apollo2.minshall.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 In-Reply-To: <193258.1604981615@apollo2.minshall.org> Content-Language: en-US Received-SPF: pass client-ip=116.202.254.214; envelope-from=geo-emacs-orgmode@m.gmane-mx.org; helo=ciao.gmane.io X-detected-operating-system: by eggs.gnu.org: First seen = 2020/11/10 09:16:09 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: 28 X-Spam_score: 2.8 X-Spam_bar: ++ X-Spam_report: (2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FORGED_GMAIL_RCVD=1, FORGED_MUA_MOZILLA=2.309, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, NICE_REPLY_A=-0.001, NML_ADSP_CUSTOM_MED=0.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Spam-Score: -0.41 X-TUID: 41qKZuoIoNCO 2020-11-10 Greg Minshall wrote: > > i would guess > using 'cat -v' to read e-mail is 100% safe. even throwing in > uudecode(1), or whatever is needed to decode base64, (and then piping > through 'cat -v', of course ), it's probably still safe. Please, check that you have at least updated tmux before applying such "safe" handler: https://www.openwall.com/lists/oss-security/2020/11/05/3 The news are too recent to not mention the link in such context. The sour story is that it is unsafe to feed non-trusted files directly to terminal. A filter against control sequences is required.