bug#48676: Arbitrary code execution in Org export macros

2025-02-07 Thread Max Nikulin
On 08/02/2025 05:11, Stefan Kangas wrote: Glenn Morris writes: #+macro: hello (eval (shell-command-to-string "touch /tmp/HELLO")) Hello. {{{hello}}} Then: M-x org-export-dispatch t A[...]> Ihor, could you please look into this bug? Disclaimer: I am not Ihor. In my opinion, it is an importan

Improve documentation of org-reverse-note-order

2025-02-07 Thread Karthik Chikmagalur
It's not clear from the documentation of `org-reverse-note-order' what "note" means: --8<---cut here---start->8--- Non-nil means store new notes at the beginning of a file or entry. When nil, new notes will be filed to the end of a file or entry. This can also b

bug#48676: Arbitrary code execution in Org export macros

2025-02-07 Thread Stefan Kangas
Glenn Morris writes: > Package: emacs,org-mode > Version: 28.0.50 > Severity: important > Tags: security > > emacs -Q hello.org, where hello.org contains: > > #+macro: hello (eval (shell-command-to-string "touch /tmp/HELLO")) > Hello. {{{hello}}} > > Then: > M-x org-export-dispatch > t A > > -> n

Re: [BUG] intermittent invalid search bound error [9.6.15 (release_9.6.15 @ /tmp/.mount_Emacs-NcE3UV/share/emacs/29.4/lisp/org/)]

2025-02-07 Thread Ihor Radchenko
John writes: > I periodically get the following error for no apparent rhyme or reason: > > Warning (org-element-cache): org-element--cache: Org parser error in > Notes.org::25724. Resetting. > The error was: (error "Invalid search bound (wrong side of point)") > Backtrace: > " backtrace-to-st

Re: [BUG] Org parser error [9.8-pre (e39c42286 @ /home/karthik/.local/share/git/elpaca/builds/org/)]

2025-02-07 Thread Ihor Radchenko
Karthik Chikmagalur writes: > I ran M-h (org-mark-element) on a paragraph and got this warning: > > --8<---cut here---start->8--- > ⛔ Warning (org-element): org-element--cache: Org parser error in > 2025-01-09.org::2473. Resetting. > The error was: (wrong-typ

Re: [BUG] org agenda parsing [9.7.11 (9.7.11-6a5d0e @ /home/rivals/.emacs.d/elpa/org-9.7.11/)]

2025-02-07 Thread Ihor Radchenko
Rivals Eric writes: > Remember to cover the basics, that is, what you expected to happen and > what in fact did happen.  You don't know how to make a good report?  See > > https://orgmode.org/manual/Feedback.html#Feedback > > Your bug report will be posted to the Org mailing list. > ---

org code highlight w/ single quote

2025-02-07 Thread Jason Hemann
On at least Org mode version 9.8-pre (release_9.7.20-241-g3218d3), the following snippet is highlighted with org-code face. ~'~, plain ~foo~ I suspect that behavior is incorrect. When I export, say, to HTML, the output looks like I would expect—namely, that the comma and the word plain are outs

Re: [BUG] Warning (org-element): ‘org-element-at-point’ cannot be used in non-Org buffer # (org-agenda-mode) [9.7.11 (release_9.7.11 @ /Applications/Emacs.app/Contents/Resources/l

2025-02-07 Thread Ihor Radchenko
Mark Barton writes: >>> May you try to run M-x debug-on-entry RET display-warning RET and >>> try triggering the warning? Then, you will see a backtrace with the full >>> information about where the warning is triggered. >>> >>> (you can later disable the debugger via M-x cancel-debug-on-entry R

Re: org-present and '+' used for drawing

2025-02-07 Thread Ihor Radchenko
"Loris Bennett" writes: > Should I be surprised when, if I look at the following > > * Test > > #+BEGIN_SRC ditaa :file foo.png > +---+ > | Hello | > +---+ > #+END_SRC > > with org-present, the '+' signs disappear, shifting the subsequent > characters to the left? Sounds li

Re: [BUG] Org Agenda issue (org said to send) [9.6.29](@ /home/tyler/.emacs.d/elpa/org-9.6.29/)]

2025-02-07 Thread Ihor Radchenko
Tyler Mayes writes: > I was having an issue where the agenda displays but any command I run > says "No Org Agenda currently displayed" but it is showing entries that > I can tab to and if follow mode is on it goes to them. > > I tried org-mode-restart which didn't do anything then I used load-fil

Re: [DISCUSSION] Contributing policy for WORG

2025-02-07 Thread Bastien Guerry
Bastien Guerry writes: > What about gollum? > > https://github.com/gollum/gollum Someone just mentioned gitit to me - we mentioned it already in 2013 and the project seems to be alive: https://github.com/jgm/gitit "Gitit is a wiki program written in Haskell. It uses Happstack for the web se