Re: [BUG][SECURITY] ob-sqlite header args allows execution of arbitrary shell commands

2023-08-21 Thread Ihor Radchenko
Max Nikulin writes: >> Do you have any ideas how to work around the deliberately constructed >> header argument values like in your example? > > Perhaps `gensym' may be used to create a symbol that can not appear in a > document. I am unsure if the following `pcase' variant may be improved > ...

[SECURITY] Shell expansion of babel header args (was: [BUG][SECURITY] ob-sqlite header args allows execution of arbitrary shell commands)

2023-08-21 Thread Ihor Radchenko
Max Nikulin writes: > P.S. Babel backends should be consistent in respect to treating options > for header arguments: > - use as is > - expand ~user and $VAR > - allow any shell expression We cannot generally know which header arg values can or cannot be shell-expanded. It is something only ind

Re: Bug: org-anniversary dates not exported to iCalendar [9.4.6 (9.4.6-3-g37f69b-elpaplus @ /home/marcus/.emacs.d/elpa/org-plus-contrib-20210531/)]

2023-08-21 Thread Marcus Zibrowius
Just to confirm: It also works with Org 9.6 for me. Thanks for looking into this! Marcus On Tue, 2023-07-25 at 07:05 +, Ihor Radchenko wrote: > Marcus Zibrowius > <[marcus.zibrow...@posteo.net](mailto:marcus.zibrow...@posteo.net)> writes: > > > > > > Please provide mode details about wh

Re: [MAINTENANCE] Org orphanage?

2023-08-21 Thread Ihor Radchenko
Corwin Brust writes: > Hi all; I added worg co-curator krupalinbox to CC. I think you did not. I added him now. > I would be happy to help with administration here. I have a GitHub > account, as well as commit on bastian's sr.ht. > > In fact, I wonder if worg curators should have some general

Re: [BUG] WORG example for ob-lilypond is no longer working as described (was: Moving some lisp/ob-*.el files to org-contrib - your advice?)

2023-08-21 Thread Ihor Radchenko
Jonathan Gregory writes: >>> - b c d e >>> + b4 c d e >> >> Is there any specific reason for this change? > > This is to ensure that the notes use the correct duration in > arrange-mode. 4 is the default duration and is carried over until > a new value is added, in this case c1. 1 is then car

Re: [Bug] org-update-dblock randomly broken for more than 10 columns and larger files

2023-08-21 Thread Jakob Schöttl
Am 20.08.23 um 10:57 schrieb Ihor Radchenko: Thanks for the reproducer! I committed a fix onto main. https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=58c5c5882 Nice, thank you very much! Now, spaces are only added to headings and the resulting table is reproducible and correct.

Re: Maintenance status of individual Org libraries

2023-08-21 Thread Ihor Radchenko
Matt writes: > On Mon, 30 Jan 2023 14:41:18 +0100 Ihor Radchenko wrote --- > > > The following libraries have no maintainer or author active on the list: > > > ob-comint, ob-core, ... > > I'm interested (and technically still maintainer of ob-shell). ob-comint and > ob-core are both

org-element-cache-warning

2023-08-21 Thread Gregor Zattler
Dear org-mode developers, Ihor, I cought an org-element-cache warning with a rather up-to-date emacs and org-mode while calling via a key binding this simple function: (defun my/org-goto-agenda-heading () (interactive) (org-refile '(4))) GNU Emacs 30.0.50 (build 1, x86_64-pc-linux-gnu,

Re: [Pre-PATCH] Overhaul of the LaTeX preview system

2023-08-21 Thread Visuwesh
[ஞாயிறு மார்ச் 12, 2023] Timothy wrote: > Hi All, > > After months of work, Karthink and I have prepared a rather large patch-set > completely overhauling the LaTeX preview system. I hope to have a patch set > shortly, but in the mean time it would be good to get some more people testing > this. >

Re: org-element-cache-warning

2023-08-21 Thread Ihor Radchenko
Gregor Zattler writes: > Dear org-mode developers, Ihor, I cought an > org-element-cache warning with a rather up-to-date > emacs and org-mode ... Thanks for reporting! > The element is: "(headline (:standard-properties [159509 160713 159557 160712 > 1..." > The real element is: "(headline (:

Re: [POLL] ob-C: Should we allow saving compiled src block to specified binary excecutable? (was: [RFC/PATCH] naming src/bin files in ob-C.el)

2023-08-21 Thread Ihor Radchenko
Ihor Radchenko writes: > I feel slightly reluctant about adding side effects to babel evaluation. > Not too reluctant though. > > I'd like to hear from other ob-C users, so I changed this thread into a poll. No replies. Closed. -- Ihor Radchenko // yantar92, Org mode contributor, Learn more ab

Re: [BUG][SECURITY] ob-sqlite header args allows execution of arbitrary shell commands

2023-08-21 Thread Max Nikulin
On 21/08/2023 14:04, Ihor Radchenko wrote: +(defconst org-shell-arg-literal (gensym "literal") (opinion) Perhaps a better name exists. Maybe org-shell-arg-tag-unescaped (or unquoted) + "Symbol to be used to mark shell arguments that should not be escaped. +See `org-make-shell-command'.") +

C-RET and empty lines

2023-08-21 Thread Max Nikulin
Hi, A couple of recent threads reminded me about quite peculiar behavior when a new heading is added by C-RET. I prefer to have an empty line before headings. Sometimes such empty lines disappear. Is such behavior (highly dependent of context) intentional? From my point of view it is confusin

Re: [Pre-PATCH] Overhaul of the LaTeX preview system

2023-08-21 Thread Karthik Chikmagalur
> It worked well all around except for three things: > > 1. I had to set org-latex-preview-precompile to nil to produce the >preview for ~2000 snippets. I got errors in process filters such >as arg-out-of-range, and Emacs completely blocked itself. I can >confirm that

Re: [Pre-PATCH] Overhaul of the LaTeX preview system

2023-08-21 Thread Visuwesh
[திங்கள் ஆகஸ்ட் 21, 2023] Karthik Chikmagalur wrote: >> It worked well all around except for three things: >> >> 1. I had to set org-latex-preview-precompile to nil to produce the >>preview for ~2000 snippets. I got errors in process filters such >>as arg-out-of-range, and Ema

Re: [Pre-PATCH] Overhaul of the LaTeX preview system

2023-08-21 Thread Karthik Chikmagalur
> I have lualatex installed as part of another texlive package but I am > not sure if org uses it however. If you haven't changed `org-latex-compiler' (globally or in the Org buffer using a keyword), it's using pdflatex. >> 3. If no, do you mind sharing this file (or a stripped down version >> yo

Re: [Pre-PATCH] Overhaul of the LaTeX preview system

2023-08-21 Thread Visuwesh
[திங்கள் ஆகஸ்ட் 21, 2023] Karthik Chikmagalur wrote: >> I have lualatex installed as part of another texlive package but I am >> not sure if org uses it however. > > If you haven't changed `org-latex-compiler' (globally or in the Org > buffer using a keyword), it's using pdflatex. I am indeed usi