summaryrefslogtreecommitdiff
blob: 9bb8529d191a2276becae8e79c97af632ecf4102 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
--- a/config/policy.xml
+++ b/config/policy.xml
@@ -52,6 +52,12 @@
     <policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" />
 -->
 <policymap>
+  <!-- https://www.kb.cert.org/vuls/id/332928 mitigation -->
+  <policy domain="coder" rights="none" pattern="PS" />
+  <policy domain="coder" rights="none" pattern="EPS" />
+  <policy domain="coder" rights="none" pattern="PDF" />
+  <policy domain="coder" rights="none" pattern="XPS" />
+
   <!-- <policy domain="system" name="shred" value="2"/> -->
   <!-- <policy domain="system" name="precision" value="6"/> -->
   <!-- <policy domain="system" name="memory-map" value="anonymous"/> -->