mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 13:08:40 +08:00
- Update all imagemagick calls to go through a new `::Imagemagick` wrapper, which wraps the command in `Discourse::SafeExec` - Patch image_optim to force its calls through `SafeExec` This provides robust defense-in-depth against vulnerabilities in image processing binaries. Landlock is supported on Linux Kernel 5.13 and above. |
||
|---|---|---|
| .. | ||
| fast_image_spec.rb | ||
| image_optim_sandbox_spec.rb | ||
| propshaft_patches_spec.rb | ||
| rspec_mocks_from_described_class_spec.rb | ||
| safe_buffer_spec.rb | ||
| schema_migration_details_spec.rb | ||
| translate_accelerator_spec.rb | ||
| web_push_spec.rb | ||