Add Venn diagram to rule-of-2.md.

R=palmer@chromium.org Bug: None Change-Id: I1d9f67bc9f6d67129d2753e885be01af16727baa Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1560132 Reviewed-by: Chris Palmer <palmer@chromium.org> Commit-Queue: Adrian Taylor <adetaylor@chromium.org> Auto-Submit: Adrian Taylor <adetaylor@chromium.org> Cr-Commit-Position: refs/heads/master@{#685827}
chromium · Aug 10, 2019 · e1f3490 · e1f3490
1 parent e71500c
commit e1f3490
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/docs/security/rule-of-2-drawing.png b/docs/security/rule-of-2-drawing.png
diff --git a/docs/security/rule-of-2.md b/docs/security/rule-of-2.md
@@ -9,6 +9,13 @@ is: Pick no more than 2 of
   * unsafe implementation language; and
   * high privilege.
 
+![alt text](rule-of-2-drawing.png "Venn diagram showing you should always use
+a safe language, a sandbox, or not be processing untrustworthy inputs in the first
+place.)
+
+(drawing source
+[here](https://docs.google.com/drawings/d/1JsXilEJA3y_-jZMBZ_ZaQEBT8c4_VoFhTlD1eocUNeA/edit?usp=sharing))
+
 ## Why?
 
 When code that handles untrustworthy inputs at high privilege has bugs, the