From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/68707 Path: news.gmane.org!not-for-mail From: Katsumi Yamaoka Newsgroups: gmane.emacs.gnus.general Subject: Re: Simple "view this image externally" question Date: Mon, 13 Jul 2009 10:16:33 +0900 Organization: Emacsen advocacy group Message-ID: References: <87k52ho9fz.fsf@gmail.com> <877hyg2uo9.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1247447911 28701 80.91.229.12 (13 Jul 2009 01:18:31 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 13 Jul 2009 01:18:31 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M17133@lists.math.uh.edu Mon Jul 13 03:18:24 2009 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.50) id 1MQABU-00068L-G0 for ding-account@gmane.org; Mon, 13 Jul 2009 03:18:24 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1MQAAO-0001gi-S5; Sun, 12 Jul 2009 20:17:16 -0500 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1MQAAM-0001gS-3K for ding@lists.math.uh.edu; Sun, 12 Jul 2009 20:17:14 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtp (Exim 4.69) (envelope-from ) id 1MQAAL-00023Z-3S for ding@lists.math.uh.edu; Sun, 12 Jul 2009 20:17:14 -0500 Original-Received: from orlando.hostforweb.net ([216.246.45.90]) by quimby.gnus.org with esmtp (Exim 3.36 #1 (Debian)) id 1MQAAs-0003wO-00 for ; Mon, 13 Jul 2009 03:17:46 +0200 Original-Received: from localhost ([127.0.0.1]:56162) by orlando.hostforweb.net with esmtpa (Exim 4.69) (envelope-from ) id 1MQA9k-0002wv-D6 for ding@gnus.org; Sun, 12 Jul 2009 20:16:36 -0500 X-Hashcash: 1:20:090713:ding@gnus.org::bAYGv0LPOkuNvWbr:0000BQy4 X-Face: #kKnN,xUnmKia.'[pp`;Omh}odZK)?7wQSl"4o04=EixTF+V[""w~iNbM9ZL+.b*_CxUmFk B#Fu[*?MZZH@IkN:!"\w%I_zt>[$nm7nQosZ<3eu;B:$Q_:p!',P.c0-_Cy[dz4oIpw0ESA^D*1Lw= L&i*6&( User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.1.50 (gnu/linux) Cancel-Lock: sha1:gjO3tFf5x/dFH1WzuO0+gN8zVJc= X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - orlando.hostforweb.net X-AntiAbuse: Original Domain - gnus.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jpl.org X-Source: X-Source-Args: X-Source-Dir: X-Spam-Score: -2.6 (--) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:68707 Archived-At: >>>>> Ted Zlatanov wrote: > Do you mean that if the image is named "; rm -rf /" Gnus will run > "display ; rm -rf /"? It won't happen for good or for evil at least in the UNIX-like system. When playing a part using an external command, Gnus writes its contents to a temp file and passes the temp file name to the command. The temp file name is generated based on the one that is the right side of "/". Cf.: (defun gnus-insert-mime-button (handle gnus-tmp-id &optional displayed) "")) [...] (when (string-match ".*/" gnus-tmp-name) (setq gnus-tmp-name (replace-match "" t t gnus-tmp-name))) Similarly the file name "; rm -fr /home/who/Mail" will cause no harm. I don't know what DOS machines do with the name `c:\', though.