0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-08 17:53:55 +08:00
discourse/app
David Taylor a071880169
DEV: Sandbox all image processing via Landlock (#42048)
- Update all imagemagick calls to go through a new `::Imagemagick`
wrapper, which wraps the command in `Discourse::SafeExec`
- Patch image_optim to force its calls through `SafeExec`

This provides robust defense-in-depth against vulnerabilities in image
processing binaries. Landlock is supported on Linux Kernel 5.13 and
above.
2026-07-27 18:27:34 +01:00
..
assets FEATURE: Add workflow tags (#42056) 2026-07-27 17:22:42 +02:00
controllers FIX: Allow logged-in users to redeem invites when new registrations are disabled (#42026) 2026-07-25 17:02:30 +02:00
helpers PERF: Avoid replacing CSP nonces in non-cacheable responses (#42008) 2026-07-24 09:49:01 +08:00
jobs FEAT: Use session engagement in CrawlerScorer (#41693) 2026-07-27 11:37:34 +08:00
mailers FEATURE: Log in with a one-time email code (#40804) 2026-06-17 12:34:48 -07:00
models DEV: Sandbox all image processing via Landlock (#42048) 2026-07-27 18:27:34 +01:00
queries/reports DEV: Remove reporting_improvements upcoming change (#41259) 2026-07-01 07:52:02 +08:00
serializers FIX: Staged-user email disclosure to moderators via UserCardSerializer (#41993) 2026-07-23 13:47:48 -05:00
services DEV: Drop landlock problem-check (#42059) 2026-07-27 16:54:51 +01:00
views PERF: Avoid HTML escaping preloaded JSON (#41978) 2026-07-24 09:25:06 +08:00