#!/bin/bash
#
# GoDaddy is offering to fix the ImageMagick
# vulnerability for the totally reasonable price
# of $79. Here's everything they would do in
# 1 line that you can just paste into your terminal.
# It’s $0 because it took 15 minutes on a phone.
#
# P.s. If a complete stranger cares more about your
# website's security that your hosting provider, you
# might want to find a better one.
for d in `find / -type d -name "ImageMagick*"`; do if [ -f $d/policy.xml ]; then mv $d/policy.xml $d/policy.backup.xml; cat $d/policy.backup.xml | sed -s 's/<policymap>/<policymap><policy domain="coder" rights="none" pattern="EPHEMERAL"><\/policy> <policy domain="coder" rights="none" pattern="URL"><\/policy> <policy domain="coder" rights="none" pattern="HTTPS"><\/policy> <policy domain="coder" rights="none" pattern="MVG"><\/policy> <policy domain="coder" rights="none" pattern="MSL"><\/policy> <policy domain="coder" rights="none" pattern="TEXT"><\/policy> <policy domain="coder" rights="none" pattern="SHOW"><\/policy> <policy domain="coder" rights="none" pattern="WIN"><\/policy> <policy domain="coder" rights="none" pattern="PLT"><\/policy>/g' >> $d/policy.xml; fi; done
Comments