Backport upstream MR #299 to enable sandboxing

299.patch

@@ -0,0 +1,27 @@
+From afc1e32c7dc0d36166f8cb200fe37ee9fbc39c02 Mon Sep 17 00:00:00 2001
+From: Michael Catanzaro <mcatanzaro@redhat.com>
+Date: Tue, 26 Sep 2023 17:07:02 -0500
+Subject: [PATCH] Enable the glycin-loaders sandbox
+
+We (presumably accidentally) shipped with the sandbox disabled by
+default, so it's not doing any good. Enable it. Developers who want to
+disable the sandbox can easily set the build option.
+---
+ meson_options.txt | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/meson_options.txt b/meson_options.txt
+index 2a4698c7..70fa9645 100644
+--- a/meson_options.txt
++++ b/meson_options.txt
+@@ -13,4 +13,5 @@ option(
+   'disable-glycin-sandbox',
+   type: 'boolean',
+   description: 'Disable sandboxing of image loaders in glycin. Only intended for development purposes.',
+-)
+\ No newline at end of file
++  value: false
++)
+-- 
+GitLab
+

loupe.spec

@@ -31,6 +31,9 @@ License:        (MIT OR Apache-2.0) AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apa
 URL:            https://gitlab.gnome.org/GNOME/loupe
 Source0:        https://download.gnome.org/sources/loupe/45/loupe-%{tarball_version}.tar.xz
 
+# https://gitlab.gnome.org/GNOME/loupe/-/merge_requests/299
+Patch:          299.patch
+
 # https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval
 ExcludeArch:    %{ix86}