Skip to content

Sandbox external processes

Mat2 is using a lot of software with a long history of vulnerabilities (poppler, cairo, ffmpeg, …). We should sandbox them.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information