From d289ef3fea27283387323a73b6cf40c896dd01bc Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Tue, 30 Jul 2013 10:59:50 +2000 Subject: [PATCH] Re: problems viewing attachments in emacs ui --- 0c/325bd881c7407dd30878aff843fda19317d2c2 | 129 ++++++++++++++++++++++ 1 file changed, 129 insertions(+) create mode 100644 0c/325bd881c7407dd30878aff843fda19317d2c2 diff --git a/0c/325bd881c7407dd30878aff843fda19317d2c2 b/0c/325bd881c7407dd30878aff843fda19317d2c2 new file mode 100644 index 000000000..9aa8d14e8 --- /dev/null +++ b/0c/325bd881c7407dd30878aff843fda19317d2c2 @@ -0,0 +1,129 @@ +Return-Path: +X-Original-To: notmuch@notmuchmail.org +Delivered-To: notmuch@notmuchmail.org +Received: from localhost (localhost [127.0.0.1]) + by olra.theworths.org (Postfix) with ESMTP id E0CA7431FC0 + for ; Mon, 29 Jul 2013 08:00:02 -0700 (PDT) +X-Virus-Scanned: Debian amavisd-new at olra.theworths.org +X-Spam-Flag: NO +X-Spam-Score: 0 +X-Spam-Level: +X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none] + autolearn=disabled +Received: from olra.theworths.org ([127.0.0.1]) + by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024) + with ESMTP id bF7vS7-mkbxh for ; + Mon, 29 Jul 2013 07:59:57 -0700 (PDT) +Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108]) + by olra.theworths.org (Postfix) with ESMTP id 3CFBD431FBF + for ; Mon, 29 Jul 2013 07:59:57 -0700 (PDT) +Received: from [192.168.23.229] (dsl254-070-154.nyc1.dsl.speakeasy.net + [216.254.70.154]) + by che.mayfirst.org (Postfix) with ESMTPSA id 6BC99F984 + for ; Mon, 29 Jul 2013 10:59:51 -0400 (EDT) +Message-ID: <51F68366.5070900@fifthhorseman.net> +Date: Mon, 29 Jul 2013 10:59:50 -0400 +From: Daniel Kahn Gillmor +User-Agent: Mozilla/5.0 (X11; Linux x86_64; + rv:17.0) Gecko/20130630 Icedove/17.0.7 +MIME-Version: 1.0 +To: Notmuch Mail +Subject: Re: problems viewing attachments in emacs ui +References: <87hafe4ox6.fsf@servo.finestructure.net> + <87ehai4ns3.fsf@servo.finestructure.net> + <87ob9lipz5.fsf@zancas.localnet> +In-Reply-To: <87ob9lipz5.fsf@zancas.localnet> +X-Enigmail-Version: 1.5.1 +Content-Type: multipart/signed; micalg=pgp-sha512; + protocol="application/pgp-signature"; + boundary="----enig2UXMLROVCTGLCAKSANNQA" +X-BeenThere: notmuch@notmuchmail.org +X-Mailman-Version: 2.1.13 +Precedence: list +Reply-To: notmuch +List-Id: "Use and development of the notmuch mail system." + +List-Unsubscribe: , + +List-Archive: +List-Post: +List-Help: +List-Subscribe: , + +X-List-Received-Date: Mon, 29 Jul 2013 15:00:03 -0000 + +This is an OpenPGP/MIME signed message (RFC 4880 and 3156) +------enig2UXMLROVCTGLCAKSANNQA +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: quoted-printable + +On 07/29/2013 07:07 AM, David Bremner wrote: +> Jameson Graef Rollins writes: +>=20 +>> I'm now realizing that my problem with html parts is probably that +>> browser is attempting to open the temporary file in the background. +>> When the browser call returns, the caller assumes the application is +>> done with the temp file and purges it. So for this issue at least I +>> need to either convince my browser to not open the file in the +>> background, or tell emacs to cleanup temp files at some later time +>> (session termination, for instance). +>=20 +> I didn't have time to think through the consequences, but the following= + +> kludge seems to let the browser start: + +hm. there are some pretty serious consequences to feeding arbitrary +html to your web browser via a file:/// URL. In particular, your +browser might execute arbitrary javascript (which itself can interact +with the rest of your web browsing history and/or logged-in sessions), +and might fetch data from outside sources (leaking at least information +about when and from where you read your e-mail, and potentially other +things). + +The consequence of commenting out the file deletion is that you start to +fill up your tmpdir with a bunch of crufty old files :) + +One other approach that would address some of these other issues might +be to open the html in a separate, temporary profile for your web +browser, one that doesn't directly interact with your main web browsing +profile (or any other browser profile). This would also have the +advantage of not terminating until the browser profile is closed. + +I know that chromium offers as --temp-profile argument that behaves this +way. I'm not sure how to do it with iceweasel -- you could do it +manually, with a combination of -ProfileManager and -no-remote, then +create a new profile, and then when done clean it up afterwards +manually, but that sounds like a real pain. + +hth, + + --dkg + + +------enig2UXMLROVCTGLCAKSANNQA +Content-Type: application/pgp-signature; name="signature.asc" +Content-Description: OpenPGP digital signature +Content-Disposition: attachment; filename="signature.asc" + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.14 (GNU/Linux) +Comment: Using GnuPG with Icedove - http://www.enigmail.net/ + +iQJ8BAEBCgBmBQJR9oNmXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w +ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB +NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpclusP/0xpbwQKLhxXycIAPelcDJk8 +FPs+FL4VUcdwHRCqhm6Xh/ArWJ9IeUb/JlDl0SDk6q8qFtkKrcglI1BAA7tQDBVA +hBx+ho1CWa13bW3Lvmf1LpeH7oT3Q54o3+0QcZSMFG9FQMhy3OMv4LlTN0WKf4zE +M7QqDTucQeZSgwObhrLyY56s2eCTNOpQYj/eChf/rTMxMkPvarwAAK6s+xW5Jxjm +wYrDIgoeekiK+/SV6fgbNubM8b2wflUgX/UjS7lmbiNl6ed1NOl+eO8gKyIMdVTM +tfyRc4eiqTXf/cRIl7VqGKU7H/Vu495szo4n9Zw7leD9Yfd0PnPbNrmDjEwqUsLV +2Un2135DPE2Gu3JylnDthnnrh/VGr+OREe/T/dPtcrZy42ZOIsLZoUPe8xdj/gLL +B2ag7SfYRr7z6vGod8ji3+AgEZyqgAYqrjEtbAyK2Q9lyOYsP1/GNfBtj7/curOb +iltid7Mph1clPjKAwuOuZUesEJxDSrWLE1q8Sn/bSbZn+jxfgOPHcOwOfKbusdCi +pv7soX+JsgjvK0p62kt9aCU02PX0kq4+xtjlh92zEORX2CD4vZNGP5rg1mowZbVA +XssGzhC3tnLTNpRkd5KRJZnF0A09tovzqeJTNOflSU9w5cl6FgoUTPgFg6Icv89M +4YgB3mdqhgiFXcPYNIws +=2Kps +-----END PGP SIGNATURE----- + +------enig2UXMLROVCTGLCAKSANNQA-- -- 2.26.2