Instantly share code, notes, and snippets.

@rawdigits rawdigits/policy.xml Secret
Last active Jan 14, 2019

Embed
What would you like to do?
Download ZIP
Raw
policy.xml
<policymap>
<policy domain="coder" rights="none" pattern="EPHEMERAL" />
<policy domain="coder" rights="none" pattern="URL" />
<policy domain="coder" rights="none" pattern="HTTPS" />
<policy domain="coder" rights="none" pattern="MVG" />
<policy domain="coder" rights="none" pattern="MSL" />
</policymap>
@sanmai

This comment has been minimized.

Sign in to view
Copy link

sanmai commented May 5, 2016 •
edited

Command convert -list policy will show you where you should put the file above. Also use it to verify your inputs:

$ convert -list policy

Path: /etc/ImageMagick-6/policy.xml
  Policy: undefined
    rights: None 
  Policy: Coder
    rights: None 
    pattern: EPHEMERAL
  Policy: Coder
    rights: None 
    pattern: URL
  Policy: Coder
    rights: None 
    pattern: HTTPS
  Policy: Coder
    rights: None 
    pattern: MVG
  Policy: Coder
    rights: None 
    pattern: MSL

Path: [built-in]
  Policy: Undefined
    rights: None
@erickdi

This comment has been minimized.

Sign in to view
Copy link

erickdi commented Jan 14, 2019

Awesome, Web app coders should also investigate sandboxing ImageMagick to limit its access.

printable calendar
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment