0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 05:42:36 +08:00
discourse/lib/freedom_patches
David Taylor a071880169
DEV: Sandbox all image processing via Landlock (#42048)
- Update all imagemagick calls to go through a new `::Imagemagick`
wrapper, which wraps the command in `Discourse::SafeExec`
- Patch image_optim to force its calls through `SafeExec`

This provides robust defense-in-depth against vulnerabilities in image
processing binaries. Landlock is supported on Linux Kernel 5.13 and
above.
2026-07-27 18:27:34 +01:00
..
active_record_attribute_methods.rb
active_record_disable_serialization.rb
ams_include_without_root.rb
copy_file.rb
cose_rsapkcs1.rb
fast_image.rb
final_destination_connect.rb FIX: Keep TCPServer.open(port) working with the Happy Eyeballs patch 2026-07-22 09:05:38 +02:00
image_optim_sandbox.rb DEV: Sandbox all image processing via Landlock (#42048) 2026-07-27 18:27:34 +01:00
inflector_backport.rb
ip_addr.rb
message_pack_extensions.rb
net_http.rb
net_http_header.rb
pitchfork_sock_stream.rb
propshaft_patches.rb
rails_multisite.rb
request_server_session.rb
rspec_mocks_from_described_class.rb
safe_buffer.rb
safe_migrations.rb
schema_migration_details.rb
translate_accelerator.rb
web_push_request.rb