Add script for sandboxing w3m

config/aerc.conf

@@ -81,7 +81,7 @@ alternatives=text/plain,text/html
 # against (non-case-sensitive) and a comma, e.g. subject,text will match a
 # subject which contains "text". Use header,~regex to match against a regex.
 subject,~PATCH=contrib/hldiff.py
-text/html=w3m -T text/html -cols $(tput cols) -dump -o display_image=false -o display_link_number=true
+text/html=contrib/html
 text/*=contrib/plaintext.py
 
 [lbinds]

contrib/html

@@ -0,0 +1,10 @@
+#!/bin/sh
+# aerc filter which runs w3m using socksify (from the dante package) to prevent
+# any phoning home by rendered emails
+export SOCKS_SERVER="127.0.0.1:1"
+exec socksify w3m \
+	-T text/html \
+	-cols $(tput cols) \
+	-dump \
+	-o display_image=false \
+	-o display_link_number=true