From 93695d1e84aff7c2f9a0aa4d49fc94f7b6b12d55 Mon Sep 17 00:00:00 2001
From: Drew DeVault <sir@cmpwn.com>
Date: Sun, 31 Mar 2019 15:33:07 -0400
Subject: [PATCH] Add script for sandboxing w3m

---
 config/aerc.conf |  2 +-
 contrib/html     | 10 ++++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100755 contrib/html

diff --git a/config/aerc.conf b/config/aerc.conf
index c310dfc..ffd587e 100644
--- a/config/aerc.conf
+++ b/config/aerc.conf
@@ -81,7 +81,7 @@ alternatives=text/plain,text/html
 # against (non-case-sensitive) and a comma, e.g. subject,text will match a
 # subject which contains "text". Use header,~regex to match against a regex.
 subject,~PATCH=contrib/hldiff.py
-text/html=w3m -T text/html -cols $(tput cols) -dump -o display_image=false -o display_link_number=true
+text/html=contrib/html
 text/*=contrib/plaintext.py
 
 [lbinds]
diff --git a/contrib/html b/contrib/html
new file mode 100755
index 0000000..db7808a
--- /dev/null
+++ b/contrib/html
@@ -0,0 +1,10 @@
+#!/bin/sh
+# aerc filter which runs w3m using socksify (from the dante package) to prevent
+# any phoning home by rendered emails
+export SOCKS_SERVER="127.0.0.1:1"
+exec socksify w3m \
+	-T text/html \
+	-cols $(tput cols) \
+	-dump \
+	-o display_image=false \
+	-o display_link_number=true