Replace Paperclip with CarrierWave about comfortable-mexican-sofa HOT 8 CLOSED

+1 I'm using carrierwave in my app. Love it.

from comfortable-mexican-sofa.

No image manipulation is used now, why not already implement carrierwave? It already support RMagick and MiniMagick. If u want I can provide a pull request.

from comfortable-mexican-sofa.

You can set your own rules for paperclip if you want to create thumbs/etc. CarrierWave has problems with how it interfaces with your app. See: carrierwaveuploader/carrierwave#361
I looked really good on the surface, but I'm not going to use it until it gets fixed. DragonFly probably would be better. But for now I'll stick with Paperclip.

from comfortable-mexican-sofa.

Could we re-open this ticket?

I have notice that imagemagick will become a major problem with the CVE that it has.

If Dragonfly do support other lib, rather than imagemagick, then we could also consider that.

Paperclip only does imagemagick.

from comfortable-mexican-sofa.

what's the alternative to imagemagick these days?

from comfortable-mexican-sofa.

Like what @benvds mentioned, those would be the alternatives.

from comfortable-mexican-sofa.

you mentioned vulnerabilities in imagemagick. so what's the alternative to that? Rmagick and minimagick are just wrappers on top of that, no?

from comfortable-mexican-sofa.

I guess with a simple search so far, graphicsmagick seems to be the best alt to imagemagick.

Here are some CVE details to both library:
http://www.cvedetails.com/product/4903/Graphicsmagick-Graphicsmagick.html?vendor_id=2802
http://www.cvedetails.com/vendor/1749/Imagemagick.html

And I guess finding a ruby image/file processing gem that uses alternative library might be hard too, but should be something that needs exploring.

from comfortable-mexican-sofa.