0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
discourse/spec/lib/freedom_patches
David Taylor a071880169
DEV: Sandbox all image processing via Landlock (#42048)
- Update all imagemagick calls to go through a new `::Imagemagick`
wrapper, which wraps the command in `Discourse::SafeExec`
- Patch image_optim to force its calls through `SafeExec`

This provides robust defense-in-depth against vulnerabilities in image
processing binaries. Landlock is supported on Linux Kernel 5.13 and
above.
2026-07-27 18:27:34 +01:00
..
fast_image_spec.rb FEATURE: Support 'Happy Eyeballs' in FinalDestination::HTTP (#41680) 2026-07-15 11:31:23 +01:00
image_optim_sandbox_spec.rb DEV: Sandbox all image processing via Landlock (#42048) 2026-07-27 18:27:34 +01:00
propshaft_patches_spec.rb DEV: Replace JS build system with Rolldown (#35963) 2026-05-29 11:11:55 +01:00
rspec_mocks_from_described_class_spec.rb
safe_buffer_spec.rb
schema_migration_details_spec.rb
translate_accelerator_spec.rb DEV: Enable Rails/FilePath rubocop rule (#40097) 2026-05-19 19:07:54 +02:00
web_push_spec.rb FEATURE: Support 'Happy Eyeballs' in FinalDestination::HTTP (#41680) 2026-07-15 11:31:23 +01:00