New dependency on rust in akonadi-search

[Ben Cooksley]

On Mon, May 15, 2023 at 9:36 AM Carl Schwan <carl at carlschwan.eu> wrote:

> Hi,
>

Hi Carl,


>
> I'm planning to add a rust dependency to akonadi-search to parse html
> email in
> a safer way. Motivation for that is that I'm getting regularly crashed for
> the
> akonadi search indexer because it's parsing untrusted html emails from the
> internet. So instead of using QTextDocument which wasn't created for
> parsing
> untrusted html, it's using the html parser from servo which is spec
> compliant
> and better handle broken html.
>
> Here is the MR in question:
> https://invent.kde.org/pim/akonadi-search/-/merge_requests/20
>
> This uses the Corrosion library to integrate with cmake and c++ which is
> also
> used by another Gear package: Angelfish for the adblock feature and I was
> thinking about also adding to NeoChat for providing search in e2ee rooms
> via
> the seshat library[1]. Dependency updates of the rust packaging is handled
> by
> gitlab-dependabot[2] which should ensure everything stays up to date for
> the
> rust dependencies.
>

To my knowledge, we haven't done any configuration to allow Dependabot to
run on invent.kde.org.
It isn't something included within Gitlab itself so this would require
configuration before it can be confirmed to be working correctly.


>
> The dependency would be for now only recommanded but not required to give
> some
> times for distros too adapt their packaging. Hopefully since the kernel
> and
> many GNOME apps use rust, the infrastructure for packaging rust apps
> should be
> in place nowadays. I will also mark bug reports with backtrace pointing to
> crash inside QTextDocument (e.g. the one in the MR descritopn) as
> downstream
> issues, as their is little I can do to fix this sort of issues upstream.
>
> Cheers,
> Carl
>

Regards,
Ben


>
> [1]: https://github.com/matrix-org/seshat
> [2]: https://dependabot-gitlab.gitlab.io/dependabot/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/distributions/attachments/20230515/6cb49002/attachment.htm>