...

diff --git a/config/policy.xml b/config/policy.xml
index b4ee2d23acc68efa3c08c26d74a494d5b972a534..3967175ca9d00a708de55af9b44e0898ea1fccbb 100644 (file)
--- a/config/policy.xml
+++ b/config/policy.xml
@@ -35,6 +35,10 @@
 
     <policy domain="path" rights="read" pattern="/repository/*" />
 
+  Lets prevent users from executing any image filters:
+
+    <policy domain="filter" rights="none" pattern="*" />
+
   Any large image is cached to disk rather than memory:
 
     <policy domain="resource" name="area" value="1GB"/>