Re: notmuch release 0.37 now available

2022-08-22 Thread Michael J Gruber
Thanks for another fine release, and for being a pleasant upstream to work with!

For Fedora Linux/RHEL/etc folks:
notmuch 0.37 is available in rawhide and f37 (branched), as well as in
updates-testing for the current release f36, all with sfsexp support.
It will not go to any EPEL branch (per guidelines), they will remain
at 0.36 (el9) resp. 0.35 (el8).

As always, you can get the most current version for any supported
Fedora Linux or EPEL branch from COPR:
https://copr.fedorainfracloud.org/coprs/mjg/notmuch
This includes EPEL 9 (with sfsexp support) and EPEL 8 (without), all
built from the same source package.

For now, I have also enabled CentOS Stream and ELN which fail to build
because of missing requirements (the devil is in the devel packages; I
will sort this out or disable those chroots again). So don't get
worried by the overall "red light", builds for all other branches are
"green" (with the test suite enabled).

Cheers
Michael (mjg)
___
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-le...@notmuchmail.org


Re: nmweb HTML injection

2022-08-22 Thread Michael J Gruber
Am Mo., 22. Aug. 2022 um 09:22 Uhr schrieb Jakub Wilk :
>
> See: https://nmbug.notmuchmail.org/nmweb/search/markup%20where%20appropriate
>
>  and  from the mail subject was dumped without escaping into HTML.
>

Interesting :)

The body is htmlescape()ed, but the subject header is used as is. I
should be escaped too.

Michael
___
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-le...@notmuchmail.org


Re: notmuch release 0.37 now available

2022-08-22 Thread erik colson
Awesome!  Thank you!
-- 
erik colson
___
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-le...@notmuchmail.org


nmweb HTML injection

2022-08-22 Thread Jakub Wilk

See: https://nmbug.notmuchmail.org/nmweb/search/markup%20where%20appropriate

 and  from the mail subject was dumped without escaping into HTML.

--
Jakub Wilk
___
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-le...@notmuchmail.org