Active Storage Vips Transformer Missing validate_transformation — CVE-2025-24293 Incomplete Fix

The Active Storage Vips Transformer (`activestorage/lib/active_storage/transformers/vips.rb`) does not override `validate_transformation()`. The ImageMagick transformer (`image_magick.rb`) was hardened in the CVE-2025-24293 fix (August 2025) with a method allowlist and argument denylist, but the …

# frozen_string_literal: true

module ActiveStorage
  module Transformers
    class Vips < ImageProcessingTransformer
      private
        def processor
          ImageProcessing::Vips
        end
    end
  end
end