1 of 6
We forbid unsafe code; you should too.
Codecs read bytes from strangers. Our crates compile with #![forbid(unsafe_code)], take resource limits and cooperative cancellation, and are fuzzed continually.
Set limits for any image you did not produce; a decoder fails cleanly instead of taking the process down.