From d47aa69bb72dea153b6901866bb66afe2cca6915 Mon Sep 17 00:00:00 2001
From: Sam <sam.saffron@gmail.com>
Date: Wed, 4 May 2016 09:30:43 +1000
Subject: [PATCH] apply image magick security patch

---
 templates/web.template.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/templates/web.template.yml b/templates/web.template.yml
index ae8db88..49e7606 100644
--- a/templates/web.template.yml
+++ b/templates/web.template.yml
@@ -21,6 +21,16 @@ params:
   upload_size: 10m
 
 run:
+  - replace:
+      filename: /usr/local/etc/ImageMagick-6/policy.xml
+      from: "<policymap>"
+      to: |
+        <policymap>
+          <policy domain="coder" rights="none" pattern="EPHEMERAL" />
+          <policy domain="coder" rights="none" pattern="HTTPS" />
+          <policy domain="coder" rights="none" pattern="MVG" />
+          <policy domain="coder" rights="none" pattern="MSL" />
+
   - exec: /usr/local/bin/ruby -e 'if ENV["DISCOURSE_SMTP_ADDRESS"] == "smtp.example.com"; puts "Aborting! Mail is not configured!"; exit 1; end'
   - exec: /usr/local/bin/ruby -e 'if ENV["DISCOURSE_HOSTNAME"] == "discourse.example.com"; puts "Aborting! Domain is not configured!"; exit 1; end'
   - exec: chown -R discourse /home/discourse
-- 
2.25.1