Skip to content

Instantly share code, notes, and snippets.

@rawdigits

rawdigits/policy.xml Secret

Last active March 29, 2021 20:38
Show Gist options
  • Save rawdigits/d73312d21c8584590783a5e07e124723 to your computer and use it in GitHub Desktop.
Save rawdigits/d73312d21c8584590783a5e07e124723 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
policy.xml
<policymap>
<policy domain="coder" rights="none" pattern="EPHEMERAL" />
<policy domain="coder" rights="none" pattern="URL" />
<policy domain="coder" rights="none" pattern="HTTPS" />
<policy domain="coder" rights="none" pattern="MVG" />
<policy domain="coder" rights="none" pattern="MSL" />
</policymap>
@sanmai
Copy link

sanmai commented May 5, 2016 •
edited
Loading

Command convert -list policy will show you where you should put the file above. Also use it to verify your inputs:

$ convert -list policy

Path: /etc/ImageMagick-6/policy.xml
  Policy: undefined
    rights: None 
  Policy: Coder
    rights: None 
    pattern: EPHEMERAL
  Policy: Coder
    rights: None 
    pattern: URL
  Policy: Coder
    rights: None 
    pattern: HTTPS
  Policy: Coder
    rights: None 
    pattern: MVG
  Policy: Coder
    rights: None 
    pattern: MSL

Path: [built-in]
  Policy: Undefined
    rights: None

@erickdi
Copy link

erickdi commented Jan 14, 2019

Awesome, Web app coders should also investigate sandboxing ImageMagick to limit its access.

printable calendar

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment