for them. the img plugin assumes that imagemagick/perlmagick are secure from malformed image attacks for at least the formats listed in img_allowed_formats. imagemagick has had security holes in the past. to be able to exploit such a hole, a user would need to be able to upload images to the wiki. fixed...