Commit 5a6a65ee6 for imagemagick.org

commit 5a6a65ee646ad8747f8e712ee35e32ee25f9310f
Author: Cristy <urban-warrior@imagemagick.org>
Date:   Sun Nov 8 07:00:35 2026 -0500

    clarify

diff --git a/config/policy-limited.xml b/config/policy-limited.xml
index 640fa49fe..b401174b9 100644
--- a/config/policy-limited.xml
+++ b/config/policy-limited.xml
@@ -31,7 +31,7 @@
     * Blocking potentially dangerous path access methods such as indirect
       reads (@files) and pipes.
     * Preventing access to sensitive filesystem locations.
-    * Restricting high-risk coders that have historically been involved in
+    * Restricting embedded scripting coders that have historically been involved in
       external content processing, scripting, or complex parsers.
     * Limiting large allocation requests that could otherwise lead to
       excessive memory consumption.
@@ -116,7 +116,7 @@
   <policy domain="path" rights="none" pattern="|*"/>

   <!--
-    Restrict high-risk coders.
+    Restrict embedded scripting coders.

     Certain modules are denied, whereas, read access is denied while write
     access remains permitted for others.  This allows ImageMagick to generate
diff --git a/config/policy-open.xml b/config/policy-open.xml
index 44b4e2f05..0e33fdf4c 100644
--- a/config/policy-open.xml
+++ b/config/policy-open.xml
@@ -175,7 +175,7 @@
   <!-- <policy domain="path" rights="none" pattern="|*"/> -->

   <!--
-    Restrict high-risk coders.
+    Restrict embedded scripting coders.

     Certain modules are denied, whereas, read access is denied while write
     access remains permitted for others.  This allows ImageMagick to generate
diff --git a/config/policy-secure.xml b/config/policy-secure.xml
index a97f94ac9..615d66a1e 100644
--- a/config/policy-secure.xml
+++ b/config/policy-secure.xml
@@ -35,7 +35,7 @@
   This policy implements a restrictive security posture suitable for processing
   untrusted images. It limits resource consumption, disables delegates and
   filters, restricts filesystem access, blocks indirect reads and pipes, and
-  prevents reading several historically high-risk formats while continuing to
+  prevents reading several historically embedded scripting formats while continuing to
   permit writing them when required. Review and adjust these settings to meet
   your organization's operational and security requirements.
 -->
@@ -116,7 +116,7 @@
   <policy domain="path" rights="none" pattern="|*"/>

   <!--
-    Restrict high-risk coders.
+    Restrict embedded scripting coders.

     Certain modules are denied, whereas, read access is denied while write
     access remains permitted for others.  This allows ImageMagick to generate
diff --git a/config/policy-websafe.xml b/config/policy-websafe.xml
index cbedd825e..4e7ee48f3 100644
--- a/config/policy-websafe.xml
+++ b/config/policy-websafe.xml
@@ -32,7 +32,7 @@
     * Prevent indirect file reads via @filename expansion.
     * Prevent use of stdin/stdout and file descriptor paths.
     * Disable all delegates and loadable filters.
-    * Disable selected high-risk modules that provide scripting, vector
+    * Disable selected embedded scripting modules that provide scripting, vector
       graphics processing, or URL access.

   This policy does not restrict ImageMagick to a specific image format
@@ -124,7 +124,7 @@
   <policy domain="filter" rights="none" pattern="*"/>

   <!--
-    Restrict high-risk coders.
+    Restrict embedded scripting coders.

     Certain modules are denied, whereas, read access is denied while write
     access remains permitted for others.  This allows ImageMagick to generate