Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #269445

Re: Markup in mail messages

From Max Nikulin <manikulin@gmail.com>
Newsgroups linux.debian.user
Subject Re: Markup in mail messages
Date 2024-05-18 05:40 +0200
Message-ID <IFj5n-e6wv-1@gated-at.bofh.it> (permalink)
References (7 earlier) <IEogN-dxnX-9@gated-at.bofh.it> <IEJlf-dK94-1@gated-at.bofh.it> <IEJEB-dKfv-1@gated-at.bofh.it> <IEJOh-dKiF-1@gated-at.bofh.it> <IFbrb-e1nK-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 18/05/2024 02:25, Stefan Monnier wrote:
>>> Actually I've been tempted to teach my mail reader to transform HTML
>>> into some lightweight markup (yeah, you need a bit of heuristics for
>>> that ;-) -- say Org, but why not its poor sister Markdown.
>> Please don't settle for markdown. I would love a org filter!
>> org-mode just handles tabular data admirably 🙂
> 
> Just beware that Org's code is generally written under the implicit
> assumption that the Org document is trusted, so if you try to reuse
> parts of Org's code to do the rendering be extra mindful of the
> potential for security holes.

Leaving aside that in bookworm emacs has not got an update fixing a 
serious security issue, do you have an example of HTML to Org converter 
that may generate unsafe markup?

Specifically to tables, I do not like that arbitrary code may be 
executed in response to TAB or C-c C-c. However I am unsure if formulas 
may appear in an Org file converted from HTML.

emacs-orgmode. Re: [BUG][Security] begin_src :var evaluated before the 
prompt to confirm execution. Fri, 28 Oct 2022 11:11:18 +0700.
https://list.orgmode.org/tjfkp7$ggm$1@ciao.gmane.io

> [ This applies to many other ELisp packages, of course; it's not
>    exclusive to Org.  ]

Yesterday reading bug reports and emacs-devel threads related to 
emacsclient-mail.desktop, I noticed the following:
> IMHO we should stop kow-towing to the information security people who
> make a huge fuss over every single bug, especially bugs like this one
> which only show up when you specifically try to trigger them.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-13 22:20 +0200
  Re: Dovecot correct ownership for logs Geert Stappers <stappers@stappers.nl> - 2024-05-13 22:30 +0200
  Re: Dovecot correct ownership for logs Greg Wooledge <greg@wooledge.org> - 2024-05-13 22:30 +0200
    Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 13:20 +0200
  Re: Dovecot correct ownership for logs jeremy ardley <jeremy.ardley@gmail.com> - 2024-05-14 00:50 +0200
    Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 13:20 +0200
      Re: Dovecot correct ownership for logs jeremy ardley <jeremy.ardley@gmail.com> - 2024-05-14 13:40 +0200
        Re: Dovecot correct ownership for logs Greg Wooledge <greg@wooledge.org> - 2024-05-14 13:50 +0200
          Re: Dovecot correct ownership for logs jeremy ardley <jeremy.ardley@gmail.com> - 2024-05-14 14:00 +0200
            Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 19:30 +0200
          Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 14:00 +0200
            Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 15:20 +0200
              Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 15:30 +0200
              OT: Top Posting (was: Dovecot correct ownership for logs) "Loris Bennett" <loris.bennett@fu-berlin.de> - 2024-05-14 16:00 +0200
                Re: OT: Top Posting (was: Dovecot correct ownership for logs) Richard <rrosner5@gmail.com> - 2024-05-14 16:10 +0200
                Re: OT: Top Posting gene heskett <gheskett@shentel.net> - 2024-05-14 17:00 +0200
                Re: OT: Top Posting Richard <rrosner5@gmail.com> - 2024-05-14 17:10 +0200
                Re: OT: Top Posting Jeffrey Walton <noloader@gmail.com> - 2024-05-14 21:00 +0200
                Re: OT: Top Posting Larry Martell <larry.martell@gmail.com> - 2024-05-15 00:30 +0200
                Re: OT: Top Posting fxkl47BF@protonmail.com - 2024-05-14 19:10 +0200
                Re: OT: Top Posting Greg Wooledge <greg@wooledge.org> - 2024-05-14 19:50 +0200
                Re: OT: Top Posting "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-05-14 20:00 +0200
                Re: OT: Top Posting Nicolas George <george@nsup.org> - 2024-05-14 20:20 +0200
                Re: OT: Top Posting Karen Lewellen <klewellen@shellworld.net> - 2024-05-14 20:40 +0200
                Re: OT: Top Posting Greg Wooledge <greg@wooledge.org> - 2024-05-14 21:40 +0200
                Markup in mail messages (was: Re: OT: Top Posting) Max Nikulin <manikulin@gmail.com> - 2024-05-15 04:20 +0200
                Re: Markup in mail messages eben@gmx.us - 2024-05-15 05:40 +0200
                Re: Markup in mail messages Darac Marjal <mailinglist@darac.org.uk> - 2024-05-15 17:00 +0200
                Re: Markup in mail messages David <curmudgeon@telaman.net.au> - 2024-05-15 20:50 +0200
                Re: Markup in mail messages Stefan Monnier <monnier@iro.umontreal.ca> - 2024-05-16 15:30 +0200
                Re: Markup in mail messages <tomas@tuxteam.de> - 2024-05-16 15:50 +0200
                Re: Markup in mail messages Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-16 16:00 +0200
                Re: Markup in mail messages Stefan Monnier <monnier@iro.umontreal.ca> - 2024-05-17 21:30 +0200
                Re: Markup in mail messages Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-17 23:20 +0200
                Re: Markup in mail messages Max Nikulin <manikulin@gmail.com> - 2024-05-18 05:40 +0200
                Re: Markup in mail messages <tomas@tuxteam.de> - 2024-05-18 07:50 +0200
                Re: Markup in mail messages Max Nikulin <manikulin@gmail.com> - 2024-05-16 19:00 +0200
                Re: Markup in mail messages Karl Vogel <vogelke@pobox.com> - 2024-05-17 05:50 +0200
                Re: Markup in mail messages Max Nikulin <manikulin@gmail.com> - 2024-05-17 07:50 +0200
                Re: Markup in mail messages Greg Wooledge <greg@wooledge.org> - 2024-05-17 13:20 +0200
                Re: Markup in mail messages Max Nikulin <manikulin@gmail.com> - 2024-05-18 15:30 +0200
                Re: Markup in mail messages Greg Wooledge <greg@wooledge.org> - 2024-05-18 15:50 +0200
                Re: Markup in mail messages Curt <curty@free.fr> - 2024-05-16 17:10 +0200
                Re: OT: Top Posting debian-user@howorth.org.uk - 2024-05-14 21:40 +0200
                Re: OT: Top Posting Cindy Sue Causey <butterflybytes@gmail.com> - 2024-05-15 16:40 +0200
                Re: OT: Top Posting Nicolas George <george@nsup.org> - 2024-05-15 17:00 +0200
                Re: OT: Top Posting gene heskett <gheskett@shentel.net> - 2024-05-15 20:10 +0200
                Re: OT: Top Posting "Andrew M.A. Cater" <amacater@einval.com> - 2024-05-14 20:30 +0200
                Re: OT: Top Posting Andy Smith <andy@strugglers.net> - 2024-05-14 23:20 +0200
                Re: OT: Top Posting fxkl47BF@protonmail.com - 2024-05-14 23:40 +0200
                Re: OT: Top Posting Cindy Sue Causey <butterflybytes@gmail.com> - 2024-05-15 15:50 +0200
                Re: OT: Top Posting Nicolas George <george@nsup.org> - 2024-05-15 16:10 +0200
                Re: OT: Top Posting gene heskett <gheskett@shentel.net> - 2024-05-15 16:50 +0200
                Re: OT: Top Posting Greg Wooledge <greg@wooledge.org> - 2024-05-15 16:50 +0200
                Re: OT: Top Posting Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-15 18:10 +0200
                Re: OT: Top Posting "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-05-15 18:50 +0200
                Re: OT: Top Posting (was: Dovecot correct ownership for logs) <tomas@tuxteam.de> - 2024-05-14 17:30 +0200
              Re: Dovecot correct ownership for logs Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-14 16:00 +0200
                Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 20:50 +0200
              Re: Dovecot correct ownership for logs Alain D D Williams <addw@phcomp.co.uk> - 2024-05-14 17:40 +0200
                Re: Dovecot correct ownership for logs Nicolas George <george@nsup.org> - 2024-05-14 17:50 +0200
        Re: Dovecot correct ownership for logs <tomas@tuxteam.de> - 2024-05-14 13:50 +0200
  Re: Dovecot correct ownership for logs <tomas@tuxteam.de> - 2024-05-14 06:40 +0200
    Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 13:40 +0200
      Re: Dovecot correct ownership for logs tomas@tuxteam.de - 2024-05-14 13:50 +0200
        Re: Dovecot correct ownership for logs Florent Rougon <f.rougon@free.fr> - 2024-05-14 14:10 +0200
        Re: Dovecot correct ownership for logs tomas@tuxteam.de - 2024-05-14 14:20 +0200
          Re: Dovecot correct ownership for logs jeremy ardley <jeremy.ardley@gmail.com> - 2024-05-15 00:50 +0200
            Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-15 12:30 +0200
              Re: Dovecot correct ownership for logs jeremy ardley <jeremy.ardley@gmail.com> - 2024-05-15 12:40 +0200
                Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-15 13:00 +0200
                Re: Dovecot correct ownership for logs jeremy ardley <jeremy.ardley@gmail.com> - 2024-05-15 13:00 +0200
              Re: Dovecot correct ownership for logs Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-15 14:00 +0200
                Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-16 13:10 +0200
                Re: Dovecot correct ownership for logs Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-16 14:40 +0200
                Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-17 10:20 +0200
                Re: Dovecot correct ownership for logs Greg Wooledge <greg@wooledge.org> - 2024-05-17 14:30 +0200
                Re: Dovecot correct ownership for logs Henning Follmann <hfollmann@itcfollmann.com> - 2024-05-17 14:30 +0200
                Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-18 15:20 +0200
        Re: Dovecot correct ownership for logs Richard <rrosner5@gmail.com> - 2024-05-14 14:20 +0200

csiph-web