On 02Sep2015 07:44, Cameron Simpson <c...@zip.com.au> wrote:
On 01Sep2015 14:39, David Champion <d...@bikeshed.us> wrote:
* On 01 Sep 2015, mwnx wrote:
Thanks. I didn't know you could do that. It seems that it requires
'allow_ansi' to be set to 'yes' though. To my understanding, this allows
ANSI sequences in the original message to be interpreted, which, as
suggested by mutt's manual, does pose somewhat of a security risk.
[...]
I'm not sure there's really any security risk in allow_ansi. [...]
it seems to allow only colors and text attributes (bold,
underline, etc). It doesn't appear to do anything with the more
dangerous sequences. [...]
it isn't passing the ANSI >sequences _through_ to the display. It is parsing a
few and setting the various markup features in the output, which are then
rendered in the normal curses highlighting/colouring processes.
As an illustrative example, the "_through_" above is displayed on my terminal
in cyan, _not_ underlined. This is because my muttrc says:
color underline $colour_hl1 default
and $colour_hl1 is currently cyan. This illustrates that the source ANSI
sequence is not passed through.
Cheers,
Cameron Simpson <c...@zip.com.au>
No, I haven't read 'Illuminatus' myself, although I do know of it. Perhaps I
might find some _more_ information in this book to back up these claims.
- j...@ibis.dsto.gov.au (James Marcus)
