Commit ed50136f6 for imagemagick.org
commit ed50136f60be9104ec8db6ce780096679cdc8d11
Author: Cristy <urban-warrior@imagemagick.org>
Date: Sat Oct 17 09:42:15 2026 -0400
set reasonable max profile size
diff --git a/config/policy-limited.xml b/config/policy-limited.xml
index 5d914e9f8..1de2c63f8 100644
--- a/config/policy-limited.xml
+++ b/config/policy-limited.xml
@@ -135,6 +135,6 @@
<policy domain="system" name="max-memory-request" value="512MiB"/>
<!-- Maximum size of an image profile. -->
- <policy domain="system" name="max-profile-size" value="256MiB"/>
+ <policy domain="system" name="max-profile-size" value="16MiB"/>
</policymap>
diff --git a/config/policy-open.xml b/config/policy-open.xml
index d3f2af3da..4e2e09f51 100644
--- a/config/policy-open.xml
+++ b/config/policy-open.xml
@@ -206,7 +206,7 @@
<!-- Maximum size of an image profile. -->
<!-- <policy domain="system" name="max-profile-size"
- value="256MiB"/> -->
+ value="16MiB"/> -->
<!-- Refuse paths whose basename is a symbolic link. -->
<!-- <policy domain="system"
diff --git a/config/policy-secure.xml b/config/policy-secure.xml
index e55147992..5fab78a18 100644
--- a/config/policy-secure.xml
+++ b/config/policy-secure.xml
@@ -132,7 +132,7 @@
<policy domain="system" name="max-memory-request" value="256MiB"/>
<!-- Maximum size of a single image profile. -->
- <policy domain="system" name="max-profile-size" value="256MiB"/>
+ <policy domain="system" name="max-profile-size" value="16MiB"/>
<!-- Fail if the target path is a symbolic link. -->
<policy domain="system" name="symlink"
diff --git a/config/policy-websafe.xml b/config/policy-websafe.xml
index 84c19056d..c02ad06ae 100644
--- a/config/policy-websafe.xml
+++ b/config/policy-websafe.xml
@@ -85,7 +85,7 @@
<policy domain="system" name="max-memory-request" value="512MiB"/>
<!-- Maximum size of a single image profile. -->
- <policy domain="system" name="max-profile-size" value="256MiB"/>
+ <policy domain="system" name="max-profile-size" value="16MiB"/>
<!-- ============================================================= -->
<!-- Path Restrictions -->