Skip to content

Instantly share code, notes, and snippets.

@rawdigits

rawdigits/policy.xml Secret

Last active Mar 29, 2021
Star
Embed
What would you like to do?
Learn more about clone URLs
Download ZIP
Raw
policy.xml
<policymap>
<policy domain="coder" rights="none" pattern="EPHEMERAL" />
<policy domain="coder" rights="none" pattern="URL" />
<policy domain="coder" rights="none" pattern="HTTPS" />
<policy domain="coder" rights="none" pattern="MVG" />
<policy domain="coder" rights="none" pattern="MSL" />
</policymap>
@sanmai
Copy link

sanmai commented May 5, 2016 •
edited

Command convert -list policy will show you where you should put the file above. Also use it to verify your inputs:

$ convert -list policy

Path: /etc/ImageMagick-6/policy.xml
  Policy: undefined
    rights: None 
  Policy: Coder
    rights: None 
    pattern: EPHEMERAL
  Policy: Coder
    rights: None 
    pattern: URL
  Policy: Coder
    rights: None 
    pattern: HTTPS
  Policy: Coder
    rights: None 
    pattern: MVG
  Policy: Coder
    rights: None 
    pattern: MSL

Path: [built-in]
  Policy: Undefined
    rights: None

@erickdi
Copy link

erickdi commented Jan 14, 2019

Awesome, Web app coders should also investigate sandboxing ImageMagick to limit its access.

printable calendar

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment