mirror of
https://github.com/diaspora/diaspora.git
synced 2026-01-09 15:18:11 -05:00
42b835f0c0
This fix was heavily inspired by Mastodon's fix for GHSA-9928-3cp5-93fm. So, thank you Cure53 for finding this issue, thank you Mozilla for paying Cure53 to look into it, and thanks for Mastodon for fixing it.
25 lines
1.0 KiB
XML
25 lines
1.0 KiB
XML
<policymap>
|
|
<policy domain="resource" name="time" value="30" />
|
|
<policy domain="resource" name="disk" value="256MiB"/>
|
|
<policy domain="resource" name="map" value="256MiB"/>
|
|
<policy domain="resource" name="memory" value="256MiB"/>
|
|
|
|
<policy domain="resource" name="height" value="56K"/>
|
|
<policy domain="resource" name="width" value="56K"/>
|
|
|
|
<policy domain="filter" rights="none" pattern="*" />
|
|
<policy domain="path" rights="none" pattern="@*" />
|
|
|
|
<policy domain="coder" rights="none" pattern="*" />
|
|
<policy domain="delegate" rights="none" pattern="*" />
|
|
<policy domain="module" rights="none" pattern="*" />
|
|
|
|
<!-- Image formats currently supported by diaspora*. -->
|
|
<policy domain="coder" rights="read | write" pattern="{GIF,JPEG,JPG,PNG,WEBP}" />
|
|
<policy domain="module" rights="read | write" pattern="{GIF,JPEG,JPG,PNG,WEBP}" />
|
|
|
|
<!-- Required for our captchas -->
|
|
<policy domain="coder" rights="read | write" pattern="LABEL" />
|
|
<policy domain="module" rights="read | write" pattern="LABEL" />
|
|
</policymap>
|