Legacy ImageMagick Discussions Archive

Hi fmw42,

1. The path to the file I've added can be viewed in my bash output (ImageMagick/policy.xml)
2. I did the suggested restart
3. My exact command is: "convert -resize https://[my file path] 500x300 jpg:-
4. I'm usuing Heroku Cedar-14 stack and my imageMagick version is: 6.7.7-10


Because ...

Hi volx757,

Did it work for you? I'm having the same problem and I tried to do what's suggested here https://gist.github.com/yanowitz/8329d8b27d8294ca7027f504326fd629 but instead of adding the policy configurations mentioned there I added what was suggested here: <policy domain="coder" rights ...

Yes, that's exactly what I tried to do: I added a new policy.xml file that suppose to override Heroku's policy.xml but for some reason it's not really doing it.

Hi,

ImageMagick was working perfectly for me on Heroku up until last month when the following security vulnerability was discovered:
https://imagetragick.com/

In response to it Heroku published the following post:
https://devcenter.heroku.com/changelog-items/891

My Guess is that they added the ...

Yes, but if you'll notice I've added another policy.xml file in which I have the following:

Policy: Coder
rights: Read Write Execute
pattern: HTTPS

I'm quite sure that Read is enough for me but just for now I added them all.

The thing is that it seems that right now I have 2 policy.xml files ...

The same error that volx757 got: not authorized error due to removal of https prefix in my srcPath image.

Hi fmw42,

1. The path to the file I've added can be viewed in my bash output (ImageMagick/policy.xml)
2. I did the suggested restart
3. My exact command is: "convert -resize https://[my file path] 500x300 jpg:-
4. I'm usuing Heroku Cedar-14 stack and my imageMagick version is: 6.7.7-10

Hi volx757,

Did it work for you? I'm having the same problem and I tried to do what's suggested here https://gist.github.com/yanowitz/8329d8b27d8294ca7027f504326fd629 but instead of adding the policy configurations mentioned there I added what was suggested here: <policy domain="coder" rights="read ...