From b71b4b98d900d3a8450577f49a37818c03b4a7bb Mon Sep 17 00:00:00 2001 From: Jeffrey 'Alex' Clark Date: Tue, 14 Apr 2026 19:56:59 -0400 Subject: [PATCH] Lint --- docs/handbook/security.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/handbook/security.rst b/docs/handbook/security.rst index 045b9410a..ebff8199f 100644 --- a/docs/handbook/security.rst +++ b/docs/handbook/security.rst @@ -224,7 +224,7 @@ Recommendations The following mitigations are listed in priority order. -1. **Sandbox image processing** — run Pillow workers in a seccomp/AppArmor- +1. **Sandbox image processing** — run Pillow workers in a seccomp/AppArmor restricted subprocess, isolated from the main application process. 2. **Block or sandbox EPS** — reject EPS at the application boundary, or run Ghostscript in an isolated container.