3 ms·
If your project is amenable to it, it's possible to wrap ffmpeg in a gvisor (runsc) docker container and greatly reduce the risk.
by Scaevolus 2y ago
If your project is amenable to it, it's possible to wrap ffmpeg in a gvisor (runsc) docker container and greatly reduce the risk.
- lyu07282 2y agoI would say if you plug user uploaded files into ffmpeg, it would be complete negligence not to sandbox it in some way.