Breaking change from 13.6.0 to 13.7.0

[ErazerBrecht]

We tried to upgrade our Magick.NET dependency but it doesn't seem to work anymore.
Our use case is converting a SVG file into a PNG file.

The error doesn't happen locally (Windows) but does happen in an Alpine based docker container.

Error:
attempt to perform an operation not allowed by the security policy `inkscape' @ error/delegate.c/ExternalDelegateCommand/387

Stacktrace

ImageMagick.MagickPolicyErrorException: attempt to perform an operation not allowed by the security policy `inkscape' @ error/delegate.c/ExternalDelegateCommand/387
   at ImageMagick.NativeInstance.CheckException(IntPtr exception, IntPtr result) in /_/src/Magick.NET/Native/NativeInstance.cs:line 57
   at ImageMagick.MagickImage.NativeMagickImage.ReadBlob(IMagickSettings`1 settings, Byte[] data, Int32 offset, Int32 length) in /_/src/Magick.NET/Native/MagickImage.cs:line 6986
   at ImageMagick.MagickImage.Read(Byte[] data, Int32 offset, Int32 length, IMagickReadSettings`1 readSettings, Boolean ping, String fileName) in /_/src/Magick.NET/MagickImage.cs:line 7594
   at ImageMagick.MagickImage.Read(Byte[] data, IMagickReadSettings`1 readSettings) in /_/src/Magick.NET/MagickImage.cs:line 4817
   at ImageMagick.MagickImage..ctor(Byte[] data, IMagickReadSettings`1 readSettings) in /_/src/Magick.NET/MagickImage.cs:line 108
   at ErazerBrecht.ShareImage.Services.ImageGenerator.ConvertSvgToPng(XmlDocument document)
   at ErazerBrecht.ShareImage.Services.ShareImageGenerator`1.Render(T dataViewModel)
   at ErazerBrecht.ShareImage.QueryHandlers.ProgramDataQueryHandler.Handle(ProgramDataQuery request, CancellationToken cancellationToken)
   at ErazerBrecht.ShareImage.Controllers.ShareImageController.GetProgram(Guid id)
   at lambda_method5(Closure, Object)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.TaskOfActionResultExecutor.Execute(ActionContext actionContext, IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.

We indeed have the following policy

<policymap>
  <policy domain=""delegate"" rights=""none"" pattern=""*"" />
  <policy domain=""coder"" rights=""none"" pattern=""*"" />
  <policy domain=""coder"" rights=""read|write"" pattern=""{PNG,SVG}"" />
  <policy domain=""resource"" name=""temporary-path"" value=""/tmp""/> 
  <policy domain=""resource"" name=""memory"" value=""2GiB""/> 
  <policy domain=""resource"" name=""map"" value=""4GiB""/> 
  <policy domain=""resource"" name=""area"" value=""75MP""/> 
  <policy domain=""resource"" name=""disk"" value=""10GiB""/> 
  <policy domain=""resource"" name=""file"" value=""768""/> 
  <policy domain=""resource"" name=""throttle"" value=""0""/> 
</policymap>"

So I assume it now uses Inkscape behind the scenes to handle the SVG.
Now my question is
What this always the case?
Is this a change in ImageMagick?
Or did the policy check never work before?

[dlemstra]

This was a bug that was fixed. In earlier version the use of inkscape was disabled because an exception would be raised if the executable could not be found. That was fixed but inkspace was still not enabled. And that was fixed between those two versions. I would advise you to enable inkscape when available because this produces better results than librsvg. If you don't want to to use inkscape you will need to specify MagickFormat.Rsvg as the format when reading the image.

[ErazerBrecht]

Really appreciate the answer!
Will tomorrow take a look!

Sincerely, Brecht

[dlemstra]

You probably also want to upgrade to the most recent version.

[ErazerBrecht]

Perfect thx!
Yeah was planning that just wanted to mention the version where it started failing.
Thx for checking this out!

Enjoy the weekend!