{"action":"created","issue":{"url":"https://api.github.com/repos/thoughtbot/paperclip/issues/2190","repository_url":"https://api.github.com/repos/thoughtbot/paperclip","labels_url":"https://api.github.com/repos/thoughtbot/paperclip/issues/2190/labels{/name}","comments_url":"https://api.github.com/repos/thoughtbot/paperclip/issues/2190/comments","events_url":"https://api.github.com/repos/thoughtbot/paperclip/issues/2190/events","html_url":"https://github.com/thoughtbot/paperclip/issues/2190","id":152852243,"number":2190,"title":"cve-2016-3714 \"magic byte\" validation","user":{"login":"jglass","id":68486,"avatar_url":"https://avatars.githubusercontent.com/u/68486?v=3","gravatar_id":"","url":"https://api.github.com/users/jglass","html_url":"https://github.com/jglass","followers_url":"https://api.github.com/users/jglass/followers","following_url":"https://api.github.com/users/jglass/following{/other_user}","gists_url":"https://api.github.com/users/jglass/gists{/gist_id}","starred_url":"https://api.github.com/users/jglass/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jglass/subscriptions","organizations_url":"https://api.github.com/users/jglass/orgs","repos_url":"https://api.github.com/users/jglass/repos","events_url":"https://api.github.com/users/jglass/events{/privacy}","received_events_url":"https://api.github.com/users/jglass/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-05-03T19:13:24Z","updated_at":"2016-05-03T19:29:32Z","closed_at":null,"body":"In [this article](https://medium.com/@rhuber/imagemagick-is-on-fire-cve-2016-3714-379faf762247#.ygiyawir9), an ImageMagick exploit is described, and the suggested temporary fixes are to use a policy file to limit the possible attack vectors and also preferably to validate the \"magic bytes\" at the beginning of each image file to make sure that they are indeed image files and not maliciously uploaded content.\r\n\r\nAlthough is of course this is an ImageMagick issue, it would be great if paperclip could validate that the first few bytes match what is expected as an extra security measure. Is this something that is already in the works or that a pull request would be welcome for?"},"comment":{"url":"https://api.github.com/repos/thoughtbot/paperclip/issues/comments/216639535","html_url":"https://github.com/thoughtbot/paperclip/issues/2190#issuecomment-216639535","issue_url":"https://api.github.com/repos/thoughtbot/paperclip/issues/2190","id":216639535,"user":{"login":"jglass","id":68486,"avatar_url":"https://avatars.githubusercontent.com/u/68486?v=3","gravatar_id":"","url":"https://api.github.com/users/jglass","html_url":"https://github.com/jglass","followers_url":"https://api.github.com/users/jglass/followers","following_url":"https://api.github.com/users/jglass/following{/other_user}","gists_url":"https://api.github.com/users/jglass/gists{/gist_id}","starred_url":"https://api.github.com/users/jglass/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jglass/subscriptions","organizations_url":"https://api.github.com/users/jglass/orgs","repos_url":"https://api.github.com/users/jglass/repos","events_url":"https://api.github.com/users/jglass/events{/privacy}","received_events_url":"https://api.github.com/users/jglass/received_events","type":"User","site_admin":false},"created_at":"2016-05-03T19:29:32Z","updated_at":"2016-05-03T19:29:32Z","body":"Thanks so much!"}}