mirror of
https://github.com/discourse/discourse.git
synced 2026-08-09 21:45:25 +08:00
4d730e9e5dBackport of #42048 to release/2026.5. --- - Update all imagemagick calls to go through a new `::Imagemagick` wrapper, which wraps the command in `Discourse::SafeExec` - Patch image_optim to force its calls through `SafeExec` This provides robust defense-in-depth against vulnerabilities in image processing binaries Also bumps landlock to 0.3 (making it unconditional in the Gemfile) and brings in the latest `Discourse::SafeExec` (from #42049), which this change depends on. Landlock is supported on Linux kernel 5.13 and above. The `topic_og_image_generator.rb` change is omitted; that file does not exist on this branch. |
||
|---|---|---|
| .. | ||
| active_record_attribute_methods.rb | ||
| active_record_disable_serialization.rb | ||
| ams_include_without_root.rb | ||
| copy_file.rb | ||
| cose_rsapkcs1.rb | ||
| fast_image.rb | ||
| image_optim_sandbox.rb | ||
| inflector_backport.rb | ||
| ip_addr.rb | ||
| message_pack_extensions.rb | ||
| net_http.rb | ||
| net_http_header.rb | ||
| pitchfork_sock_stream.rb | ||
| propshaft_patches.rb | ||
| rails_multisite.rb | ||
| request_server_session.rb | ||
| rspec_mocks_from_described_class.rb | ||
| safe_buffer.rb | ||
| safe_migrations.rb | ||
| schema_migration_details.rb | ||
| translate_accelerator.rb | ||
| web_push_request.rb | ||
