summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-30Bump the changelog0.10.0jvoisin
2019-11-30Improve a bit ppt supportjvoisin
2019-11-30Improve a bit odt handlingjvoisin
2019-11-30This is mat2, not MAT2georg
Closes #131
2019-11-30Fix the testsuite on Python3.8jvoisin
There is a bug in Python3.8 (https://bugs.python.org/issue38688) triggering an infinite recursion when copying a tree in a subfolder of the current one. We're working around it by using a list instead of an iterator, so that Python won't "discover" the target folder as part of the source files. This should fix #130
2019-11-27fix copyright attribution formattingmathilde
2019-11-26CI: Use pylint, instead of pylint3georg
It seems, despite the name, both packages depend on Python 3. However, pylint3 seems deprecated, and upstream recommends to install pylint: https://www.pylint.org/#install The current versions of both packages in Debian unstable are: pylint 2.4.4-1 pylint3 2.2.2-1 This commit fixes failing CI jobs due to the use of pylint3 2.2.2-1, which seems broken.
2019-11-26Please the new version of pylintjvoisin
2019-11-25Add an integration with Dolphinjvoisin
2019-10-17Improve a bit the support for ppt filesjvoisin
2019-10-17Fix a stacktrace in ./mat2 when the file can't be cleanedjvoisin
2019-10-13Copy file permissionsjvoisin
Mat2 (the cli) will now copy the input file permissions to the output file.
2019-10-12Add a way to disable the sandboxjvoisin
Due to bubblewrap's pickiness, mat2 can now be run without a sandbox, even if bubblewrap is installed.
2019-10-12Refactor testsjvoisin
2019-10-12Remove an unused variablejvoisin
2019-10-12Remove a useless `\`jvoisin
2019-10-12Remove useless parenthesisjvoisin
2019-10-12Fix a test for png's lightweight cleaning on corrupted filesjvoisin
2019-10-12Replace abstractstaticmethod with abstractmethodjvoisin
Apparently, abstractstaticmethod is deprecated since python3.3.
2019-10-05Mount a new tmpfs on /tmp and drop all capabilitiesmadaidan
This mounts a new tmpfs on /tmp so any files residing there would be hidden from the sandbox. Many programs store some files in there that might be useful to an attacker. It also drops all capabilities incase it is ever run with extra capabilities for whatever reason.
2019-09-21Fix bubblewrapjvoisin
On some machines (like mine), `/proc` has to be mounted. Also, since sandboxing with bubblewrap is best effort and assumes that an attacker doesn't have control outside of the file to clean, it's safe to __try__ to enable some bubblewrap features, and to silently fail otherwise.
2019-09-01Mark a comment as FPjvoisin
2019-09-01Add support for ppmjvoisin
2019-09-01Add a test for nsid cleaningjvoisin
2019-09-01Improve a bit the comments in the codejvoisin
This is related to the previous commit
2019-09-01Remove nsid fields from MSOffice documentsjvoisin
nsids are random identifiers, usually used to ease merging between documents, and can trivially be used for fingerprinting.
2019-08-31Add support for inplace cleaningjvoisin
2019-08-01Some arguments of mat2 are mutually exclusivejvoisin
2019-07-22Tweak a bit the cijvoisin
- gentoo and debian with bubblewrap are not allowed to fail anymore - don't run coverage on debian without bubblewrap
2019-07-22Remove a mypy workaround to bump coverage back to 100%jvoisin
2019-07-22Add a test for svg namespacejvoisin
2019-07-22CI: Run bubblewrap tests as different user than 'root' to fix errorsgeorg
It seems, there is a bug somewhere if the test suite is invoked as 'root', and bubblewrap is available.
2019-07-22CI: Add job to run codespell, a spell checking softwaregeorg
2019-07-20Fix mypyjvoisin
2019-07-18Display the filename along with the "No metadata found" messagejvoisin
2019-07-14Nautilus: Add note that distribution packages ship the extensiongeorg
Relates #106
2019-07-14README: Drop note about Debian jessie, which is oldoldstable nowadaysgeorg
As such, hopefully, it's not really used widely anymore. If so, this note isn't really relevant.
2019-07-14README: Add note about the user interfaces providedgeorg
2019-07-14README: Drop note about web disclosure to broaden the possible use casesgeorg
2019-07-13INSTALL: Update Debian package statusgeorg
Also, make the note generic, to omit the need to update it "constantly". Closes #76
2019-07-13Please mypyjvoisin
2019-07-13Add support for svgjvoisin
2019-07-13Compress cleaned zip archives by defaultjvoisin
2019-07-13Please mypyjvoisin
2019-07-10doc/threat_model: this is about mat2, not matgeorg
2019-06-05Parallelize the clijvoisin
2019-05-16Document the archives handling implementation's detailsjvoisin
2019-05-16Use memoization get _*_path() functionsjvoisin
This shouldn't make a big difference in the CLI/extension usage, but might improve the performances of long-running instances, or people misusing the API.
2019-05-14Please mypy wrt. the last two commitsjvoisin
2019-05-13Rework the dependency checks to distinguish required/optional onesAntoine Tenart
Rework the dependencies definition to include a 'required' flags, which is passed by the check_dependencies helper to the callers, so that they can distinguish between required and optional dependencies. This help in two ways: - The unit test for the dependencies was now failing when an optional one was missing, due to a previous rework. - Mat2's --check-dependencies was referring to "required dependencies" and was misleading for the user as some of them could be optional. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>