Author Build Commit PR
flavorjones 22917 fcca87c n/a
Repo Branch
rails/rails main
Message
Boot with an unsecurable libvips unless the processor uses it (#58734) Since cd0a2588, loading `active_storage/vips` at boot raised whenever ruby-vips was installed but libvips or ruby-vips was too old to block the unfuzzed loaders. That stopped `:mini_magick` applications from booting even though Active Storage never hands them content through libvips. Keep loading ruby-vips and calling `Vips.block_untrusted(true)` at boot for every processor, and raise only where libvips is used: when the Vips transformer loads, and when the Vips analyzer reads an image. [Fix #58394]

/api

Reference documentation

/guides

In-depth tutorials