From e263c939c96e36ae30cb65947f712191cf86a7dc Mon Sep 17 00:00:00 2001
From: iphydf <iphydf@users.noreply.github.com>
Date: Wed, 8 Jan 2025 14:38:43 +0000
Subject: [PATCH] cleanup: Be selective about image formats in appimage as
 well.

---
 qtox/docker/Dockerfile.alpine-appimage | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/qtox/docker/Dockerfile.alpine-appimage b/qtox/docker/Dockerfile.alpine-appimage
index 4dc909e..856139a 100644
--- a/qtox/docker/Dockerfile.alpine-appimage
+++ b/qtox/docker/Dockerfile.alpine-appimage
@@ -115,5 +115,14 @@ RUN mkdir -p /src/tox \
  && /build/build_toxcore.sh --arch "$SCRIPT_ARCH" --libtype shared \
  && rm -fr /src/tox
 
+# We're selective about Qt image format plugins for security reasons. We only
+# include the ones we've tested (e.g. with fuzzing).
+RUN mkdir /work/tmp \
+ && for fmt in kimg_qoi qgif qjpeg qsvg qwebp; do \
+      cp "/work/qt/plugins/imageformats/$fmt.so" /work/tmp; \
+    done \
+ && rm -rf /work/qt/plugins/imageformats \
+ && mv /work/tmp /work/qt/plugins/imageformats
+
 WORKDIR /qtox
 ENV HOME=/qtox