21–30 of 59 posts
Lazy question but anyone integrated this with Emacs Dired, to transparently search all the files?
[1]: https://www.reddit.com/r/emacs/comments/1eghspj/comment/lg6q...
To what extent does reading these formats accurately require the execution of code within the documents ? In other words, not just stuff like zip expansion by a library dependency of rga, but for example macros inside office documents or JavaScript inside PDFs. Note: I have no reason to believe such code execution is actually happening — so please don't take this as FUD. My assumption is that a secure design would in…
And then, on average, most users don't use macros in their documents.
So yes, negligible.
To what extent does reading these formats accurately require the execution of code within the documents ? In other words, not just stuff like zip expansion by a library dependency of rga, but for example macros inside office documents or JavaScript inside PDFs. Note: I have no reason to believe such code execution is actually happening — so please don't take this as FUD. My assumption is that a secure design would in…
None of them really execute "code". Pandoc has a pretty good write up of the security implications or running it, which I think applies just as much to the other ones, with the added caveat of zip bombs. https://pandoc.org/MANUAL.html#a-note-on-security It's just text, this isn't ripgrepping through your excel macros, just the data that's actually in the excel file.
(I wanted one somewhat recently, and then doing a find for xls on the linked page returns 0 results)
Use Recoll for that; check the recommended dependencies from your package manager. Synaptic it's good for this with a click from the right mouse button on the package. EDIT: For instance, under Trisquel/Ubuntu/Debian and derivatives, click on 'recollcmd', and with the right click button mark all the dependencies. Install RecollGUI for a nice UI. Now you will have something like Google Search but libre in your own des…
Source: I made the recoll engine for Searx/SearxNG and have been using this system for many years now with a full-text index over close to a terabyte worth of data.
To what extent does reading these formats accurately require the execution of code within the documents ? In other words, not just stuff like zip expansion by a library dependency of rga, but for example macros inside office documents or JavaScript inside PDFs. Note: I have no reason to believe such code execution is actually happening — so please don't take this as FUD. My assumption is that a secure design would in…
Also note that it's not necessarily safe to read these documents even if you don't intend on executing embedded code. For example, reading from pdfs uses poppler, which has had a few CVEs that could result in arbitrary code execution, mostly around image decoding. https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=poppler (No shade to poppler intended, just the first tool on the list I looked at.)