From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-4.0 required=3.0 tests=ALL_TRUSTED,BAYES_00 shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from localhost (dcvr.yhbt.net [127.0.0.1]) by dcvr.yhbt.net (Postfix) with ESMTP id 8DD6C1FA11 for ; Fri, 22 Oct 2021 08:22:47 +0000 (UTC) From: Eric Wong To: meta@public-inbox.org Subject: [PATCH 2/3] lei export-kw: completion returns all Maildir+IMAP Date: Fri, 22 Oct 2021 08:22:46 +0000 Message-Id: <20211022082247.29763-3-e@80x24.org> In-Reply-To: <20211022082247.29763-1-e@80x24.org> References: <20211022082247.29763-1-e@80x24.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit List-Id: It's theoretically possible an AUTH=ANONYMOUS login could be writable and allowed to store flags for various people (e.g. within a private network). --- lib/PublicInbox/LeiExportKw.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/PublicInbox/LeiExportKw.pm b/lib/PublicInbox/LeiExportKw.pm index 12c8f4067e9e..5be9e51ff311 100644 --- a/lib/PublicInbox/LeiExportKw.pm +++ b/lib/PublicInbox/LeiExportKw.pm @@ -128,7 +128,7 @@ sub _complete_export_kw { my $lms = $lei->lms or return (); my $match_cb = $lei->complete_url_prepare(\@argv); # filter-out read-only sources: - my @k = grep(!m!(?://;AUTH=ANONYMOUS\@|\A(?:nntps?|s?news)://)!, + my @k = grep(m!(?:maildir|imaps?):!, $lms->folders($argv[-1] // undef, 1)); my @m = map { $match_cb->($_) } @k; @m ? @m : @k;