libvips/libvips/iofuncs
John Cupitt eba9ec0dd7
Add a way to disable less well tested operations (#2636)
* quick proposal

warn on startup if untrusted operations might run

use vips_block_untrusted_set() to block untrusted operations, set an env
var or make a file to stop the warning

* mark fits, nifti and svg as untrusted

* remove the annoying "untrusted" warning message

better to warn on the download page

leave vips_block_untrusted_set() since it's obviously useful

* separate UNTRUSTED and BLOCKED

* typos

* add VIPS_BLOCK_UNTRUSTED env var

* move BLOCK_UNTRUSTED after plugin load

obviously, ooops

* add a test, disable *magick

although *magick is fuzzed, it's probably safer to disable it in
untrusted environments

* mark some more operations as untrusted
2022-04-11 11:32:32 +01:00
..
Makefile.am add sourceginput 2020-12-28 15:14:36 +00:00
buf.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
buffer.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
cache.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
connection.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
dbuf.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
enumtemplate more image to object hackery 2011-02-14 18:23:01 +00:00
enumtypes.c Add a way to disable less well tested operations (#2636) 2022-04-11 11:32:32 +01:00
error.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
gate.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
generate.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
ginputsource.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
header.c revise interpretation guesser 2022-04-05 18:32:25 +01:00
image.c clarify draw docs 2022-03-22 10:03:36 +00:00
init.c Add a way to disable less well tested operations (#2636) 2022-04-11 11:32:32 +01:00
mapfile.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
memory.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
meson.build Add meson build system (#2637) 2022-02-08 15:19:36 +00:00
object.c more init check to libvips base class 2022-02-27 18:48:37 +00:00
operation.c Add a way to disable less well tested operations (#2636) 2022-04-11 11:32:32 +01:00
rect.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
region.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
reorder.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sbuf.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
semaphore.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sink.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sink.h rename nlines as n_lines 2017-04-26 09:45:00 +01:00
sinkdisc.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sinkmemory.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sinkscreen.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
source.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sourcecustom.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
sourceginput.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
system.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
target.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
targetcustom.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
threadpool.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
type.c Improve edge handling for mapim (#2681) 2022-02-28 09:12:09 +00:00
util.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
vector.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00
vips.c vipsload: ensure resolution is positive (#2742) 2022-04-03 11:00:44 +01:00
vipsmarshal.c add VipsStreamiu 2019-11-21 16:22:43 +00:00
vipsmarshal.h add VipsStreamiu 2019-11-21 16:22:43 +00:00
vipsmarshal.list add VipsStreamiu 2019-11-21 16:22:43 +00:00
window.c Cleanup gettext handling (#2695) 2022-02-27 15:27:28 +00:00