"Dr. Arne Babenhauserheide" <arne_...@web.de> writes: > This sounds dangerous. Org mode can execute untrusted code, so this > could trick people into running untrusted code with the permissions of > their Emacs. > > Links in org-mode can run shell scripts. Yes, they usually ask, but this > may be changed it a local Emacs, trusting that it will only be used to > open trusted local files.
You are exaggerating the situation. The "problem" with shell links you are describing is a question of setting variables and is also disabled by default. eww-mode, when loading Org page, could simply set org-link-shell-confirm-function to its default value. -- Ihor Radchenko // yantar92, Org mode contributor, Learn more about Org mode at <https://orgmode.org/>. Support Org development at <https://liberapay.com/org-mode>, or support my work at <https://liberapay.com/yantar92>
