From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.text.pandoc/30576 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Albert Krewinkel Newsgroups: gmane.text.pandoc Subject: Re: state of the art in pandoc CLI wrappers? Date: Wed, 18 May 2022 23:13:39 +0200 Message-ID: <87tu9m8rxg.fsf@zeitkraut.de> References: <87v8u2aoee.fsf@zeitkraut.de> <845cec37-32af-1a31-685a-dabc3d42b314@reagle.org> Reply-To: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="32434"; mail-complaints-to="usenet@ciao.gmane.io" To: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Original-X-From: pandoc-discuss+bncBCZJF7XJTILRBIGDSWKAMGQEJANXOJY-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Wed May 18 23:14:13 2022 Return-path: Envelope-to: gtp-pandoc-discuss@m.gmane-mx.org Original-Received: from mail-lf1-f55.google.com ([209.85.167.55]) by ciao.gmane.io with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1nrQzl-0008B3-1A for gtp-pandoc-discuss@m.gmane-mx.org; Wed, 18 May 2022 23:14:13 +0200 Original-Received: by mail-lf1-f55.google.com with SMTP id w38-20020a0565120b2600b00477b08c1730sf1592362lfu.13 for ; Wed, 18 May 2022 14:14:12 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1652908452; cv=pass; d=google.com; s=arc-20160816; b=XzvMBTr+lgy+/dX5RLq/xytJO0N/fSIY2LONR1r3o7COiNqIFb8hL8mQMAxAASvKjY qbE/awopzZ0VqOkD+ENLK3eUUENlED30aaxnFkwlqBIAkP1l1PqgUmjrhMhCQN/qm9uu tqYjsDFPnunkezKZr6pj03xfJdTLR4okMmrSphxN0IKVHng2EyjPj6aM2I1j9UtZrKJC /zs8nnOzSr3h32nnFXnFdrX+5td5kTU2qGmqaWBYsO7LAuiFOFbX+z2BOj3n5MDR8MRe vZw6HQLxNnWdpAMD/2QmNShen6awCo7pLS1mAWnCLwrB1L3NmunZbrDbgkGHTJ2hMDy+ 7Eww== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :in-reply-to:date:subject:to:from:references:sender:dkim-signature; bh=a8iXZztCuu0509udQm3p+Nozh+Kxd69T8EE8xpsmKEo=; b=N8ZVivb7NFhleHqkQEPpQjDY2MqHs8Gw+/1JzKzWUM1xSa5icrXUCCZN78du5c2rrD Mt+EXnijORJ00EVbe+q/Na+EPRmIgJaZ5wTWP3mcR7TDcDy2BWu/nRFy1GmSUW/VYD2S j1XA1M66p1NYbqXsrmhtqOxRSV4xGzoLGZN2qBXsHb3OLelw3Ce/Hzru4T6UqS5LFEVY fKhuMjBlqnPCoZ3Nq5Ht+g34NPlccs1g5l6PmBySw8wV/f5GQjltxSV3wHoF4d9FAMTF jltaVduj7jl4s6gJPApHHTbi8jI+WWVoQFZVSFFp8lmgRpuAEzLOYXZxOq542A94hSBW 74AQ== ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org designates 2001:67c:2050:0:465::101 as permitted sender) smtp.mailfrom=albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20210112; h=sender:references:from:to:subject:date:in-reply-to:message-id :mime-version:x-original-sender:x-original-authentication-results :reply-to:precedence:mailing-list:list-id:list-post:list-help :list-archive:list-subscribe:list-unsubscribe; bh=a8iXZztCuu0509udQm3p+Nozh+Kxd69T8EE8xpsmKEo=; b=Fi7kAan52dgVB7aNdfv/KUTZZxTGU0ZP74r+qmckIdoGGhzHzjlFCdmnOZsa139r9Y NQYk0FX6YlgjoH6YbDyAlm8JrMcYAVNYi4ICGxcEyPFtBardApHV9gkeOlnHFqKYqyel Omevxl+8OOvP6SC5VUWQvX9RF0u5xE5vZMUH8hP0OFFCspVdIO+XP9zg3mnl6T09rAx2 yjIO0zW5D+Li7maVWPMhHO0KY2stPqF9YzYzXYYo/8FL+EvrdljwKSnz20yXyWINqPa/ 9BoGK6TDju9ngHuZdn4gzuPLppMpRA3V8Z3N69+7NJlD61XYIYO9ef+aN9FMZOeRd/xp mG1w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=sender:x-gm-message-state:references:from:to:subject:date :in-reply-to:message-id:mime-version:x-original-sender :x-original-authentication-results:reply-to:precedence:mailing-list :list-id:x-spam-checked-in-group:list-post:list-help:list-archive :list-subscribe:list-unsubscribe; bh=a8iXZztCuu0509udQm3p+Nozh+Kxd69T8EE8xpsmKEo=; b=f7I7F4xVvE38rtImnRObQANo7pdh19nC8z21murtn0VaL7wJWD3fqwGEr4aMaaYG4P D+ClpEIUEtWd8j71SJf9AgM4QYSDTuIFa+Z5dkNUr1G5ZllkYMn1kXmgc0V+TVmLg/21 ideS/nLTK9Qg2VX/CFTTzVL33/oYnX7OQTnQwIj9cl7BLRooanbe4AglYOtKMJ2Y62Jp zyXIlsLeinN1lEdJsCfmqkSv9j+55RirI/QGB8caEUBFROi+DIwLUMxaRiB4J5BYx5rl 0Hw3OqpjgicdJRWJmlATs50Mf4DkC/pIW3UJQHmXpjzA5Jl0TcLQhHYSljfcbHNiz1yv ms6g== Original-Sender: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org X-Gm-Message-State: AOAM533fgQ+hQ02lgvqp6Hg8C6EZ1QD674CJyWsOqNeNDcETpGIrcZY0 G2J5tgSpkZX7CK8OHaSiUsQ= X-Google-Smtp-Source: ABdhPJzxfLXYvg9TZtkgM2Ozq1PS6fjyzygYxkhIKyNnwKAAqQvzRxNS+8AubZCMJkrAoQbrH/F5pw== X-Received: by 2002:a2e:9c85:0:b0:253:c4f8:c146 with SMTP id x5-20020a2e9c85000000b00253c4f8c146mr746971lji.129.1652908452459; Wed, 18 May 2022 14:14:12 -0700 (PDT) X-BeenThere: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Original-Received: by 2002:a05:6512:3b0e:b0:477:a45c:ee09 with SMTP id f14-20020a0565123b0e00b00477a45cee09ls724854lfv.3.gmail; Wed, 18 May 2022 14:14:07 -0700 (PDT) X-Received: by 2002:ac2:4f16:0:b0:473:e8c9:fd37 with SMTP id k22-20020ac24f16000000b00473e8c9fd37mr948811lfr.180.1652908447224; Wed, 18 May 2022 14:14:07 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1652908447; cv=none; d=google.com; s=arc-20160816; b=bPJHr5NQKLu5PFuvjXxClIOZojrSQC1TaZdCx77pwqLN2r7qFH/aeOj67d/eE316n9 Cj/X0eE8O1iOzOFTJq+9+lQW1tQwyuiCHU9FGJAWliOv8CGAozdCx6ZiwKkCj6Lnrum9 TcpeZXGeMnIT+obeLlolcW20hTe+5DQI4fnF/rkwrmsafagvpFzZXD6ggmA2aRjPjCbt gVnq9htE0V6cGEJN3y/rh/7ofg4I0C4330ATlvXhCqwrauWYRkIVrJEJNBRYoN7Mo7po hb6aezE+3xy+sGKvpWAWtVNUYpS0fAVl5H5wStsS4XTal9XYhpeA10SLYpQk2SVisvyy kEiA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:message-id:in-reply-to:date:subject:to:from:references; bh=H8/9Gp06R5Q2YV/ZB3ElTOpDe9PD123iQio8+YLeOI8=; b=CMK5bHMHtD8un9KA7hCoX9J+hjW+9OWKEs1z9Un4I0MZQuLe5hFXN562wLxyxqsPel iqhtoVv37T7984eT6L+SgZZio6WQ45/r1egAjzJU0NultNaJ27C6lM4+bsOohj6jzXHM +9Kiz2EIrP9SOi0zfxUoVdBCgbtXnBUrKF4oLpCTuQj21JvIrxrleKsSYrlBI9hWfNfm 2gGC0EZeV6Atule9vs7IQ3Wk/yTaJKSx6iIpL6tNmUjLIZlCLZkai4uOQSrRkIAWV+a1 zMwquq2V87vDdkLiv/pdOnJnTDKxEOYKjGcYxPm3qjHH+9o7agY3ayhm7l7ykY8STAXv jUPQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org designates 2001:67c:2050:0:465::101 as permitted sender) smtp.mailfrom=albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org Original-Received: from mout-p-101.mailbox.org (mout-p-101.mailbox.org. [2001:67c:2050:0:465::101]) by gmr-mx.google.com with ESMTPS id j10-20020a05651231ca00b0047208583d26si26545lfe.11.2022.05.18.14.14.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 18 May 2022 14:14:07 -0700 (PDT) Received-SPF: pass (google.com: domain of albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org designates 2001:67c:2050:0:465::101 as permitted sender) client-ip=2001:67c:2050:0:465::101; Original-Received: from smtp102.mailbox.org (smtp102.mailbox.org [IPv6:2001:67c:2050:b231:465::102]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-101.mailbox.org (Postfix) with ESMTPS id 4L3Qhr3XYqz9sTj for ; Wed, 18 May 2022 23:14:04 +0200 (CEST) In-reply-to: <845cec37-32af-1a31-685a-dabc3d42b314-T1oY19WcHSwdnm+yROfE0A@public.gmane.org> X-Rspamd-Queue-Id: 4L3Qhr3XYqz9sTj X-Original-Sender: albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org designates 2001:67c:2050:0:465::101 as permitted sender) smtp.mailfrom=albert+pandoc-9EawChwDxG8hFhg+JK9F0w@public.gmane.org Precedence: list Mailing-list: list pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org; contact pandoc-discuss+owners-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org List-ID: X-Google-Group-Id: 1007024079513 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , Xref: news.gmane.io gmane.text.pandoc:30576 Archived-At: Joseph Reagle writes: > Does Quarto allow you to specify filters or csl files in the document > itself? For example, I like to use the pantable filter in some > documents but not all -- it's too slow for that. See CSL can be set via metadata, no wrapper needed for that. > I would worry about a document compromised on a webhost and then > synced locally compromising my local machine, so I appreciate pandoc's > constraint against running arbitrary filters from the document's > metadata. Pandoc follows the design principle that, if an attacker can control a document but not the command that's being run, then the worst they should be able to do is cause pandoc to hang. On the other hand, tools like Quarto or Jupyter Notebooks treat documents as programs; the assumption that anything can happen is already built-in. That's why running arbitrary filters is not a problem under their thread model. -- Albert Krewinkel GPG: 8eed e3e2 e8c5 6f18 81fe e836 388d c0b2 1f63 1124