[BZ#686346] [patch] Finish the implementation of "load policies"
Submitted by Tim Starling
Created attachment 226707 The patch
In January, I discussed with Christian the idea of a --no-external-files flag to rsvg-convert to support the processing of untrusted files, for example on web servers. I promised to submit a patch, but never did. A week after our conversation, Christian committed some initial work on the concept, in a2e869cb .
The attached patch aims to complete that work, following on from Christian's start. I added --no-external-files and --load-policy= command-line options to rsvg-convert, and introduced two additional load policies in addition to the "all permissive" one that Christian introduced.
The patch is generated by git format-patch, for use with git am.
Patch 226707, "The patch":