summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-25Add an integration with Dolphinjvoisin
2019-10-17Improve a bit the support for ppt filesjvoisin
2019-10-17Fix a stacktrace in ./mat2 when the file can't be cleanedjvoisin
2019-10-13Copy file permissionsjvoisin
Mat2 (the cli) will now copy the input file permissions to the output file.
2019-10-12Add a way to disable the sandboxjvoisin
Due to bubblewrap's pickiness, mat2 can now be run without a sandbox, even if bubblewrap is installed.
2019-10-12Refactor testsjvoisin
2019-10-12Remove an unused variablejvoisin
2019-10-12Remove a useless `\`jvoisin
2019-10-12Remove useless parenthesisjvoisin
2019-10-12Fix a test for png's lightweight cleaning on corrupted filesjvoisin
2019-10-12Replace abstractstaticmethod with abstractmethodjvoisin
Apparently, abstractstaticmethod is deprecated since python3.3.
2019-10-05Mount a new tmpfs on /tmp and drop all capabilitiesmadaidan
This mounts a new tmpfs on /tmp so any files residing there would be hidden from the sandbox. Many programs store some files in there that might be useful to an attacker. It also drops all capabilities incase it is ever run with extra capabilities for whatever reason.
2019-09-21Fix bubblewrapjvoisin
On some machines (like mine), `/proc` has to be mounted. Also, since sandboxing with bubblewrap is best effort and assumes that an attacker doesn't have control outside of the file to clean, it's safe to __try__ to enable some bubblewrap features, and to silently fail otherwise.
2019-09-01Mark a comment as FPjvoisin
2019-09-01Add support for ppmjvoisin
2019-09-01Add a test for nsid cleaningjvoisin
2019-09-01Improve a bit the comments in the codejvoisin
This is related to the previous commit
2019-09-01Remove nsid fields from MSOffice documentsjvoisin
nsids are random identifiers, usually used to ease merging between documents, and can trivially be used for fingerprinting.
2019-08-31Add support for inplace cleaningjvoisin
2019-08-01Some arguments of mat2 are mutually exclusivejvoisin
2019-07-22Tweak a bit the cijvoisin
- gentoo and debian with bubblewrap are not allowed to fail anymore - don't run coverage on debian without bubblewrap
2019-07-22Remove a mypy workaround to bump coverage back to 100%jvoisin
2019-07-22Add a test for svg namespacejvoisin
2019-07-22CI: Run bubblewrap tests as different user than 'root' to fix errorsgeorg
It seems, there is a bug somewhere if the test suite is invoked as 'root', and bubblewrap is available.
2019-07-22CI: Add job to run codespell, a spell checking softwaregeorg
2019-07-20Fix mypyjvoisin
2019-07-18Display the filename along with the "No metadata found" messagejvoisin
2019-07-14Nautilus: Add note that distribution packages ship the extensiongeorg
Relates #106
2019-07-14README: Drop note about Debian jessie, which is oldoldstable nowadaysgeorg
As such, hopefully, it's not really used widely anymore. If so, this note isn't really relevant.
2019-07-14README: Add note about the user interfaces providedgeorg
2019-07-14README: Drop note about web disclosure to broaden the possible use casesgeorg
2019-07-13INSTALL: Update Debian package statusgeorg
Also, make the note generic, to omit the need to update it "constantly". Closes #76
2019-07-13Please mypyjvoisin
2019-07-13Add support for svgjvoisin
2019-07-13Compress cleaned zip archives by defaultjvoisin
2019-07-13Please mypyjvoisin
2019-07-10doc/threat_model: this is about mat2, not matgeorg
2019-06-05Parallelize the clijvoisin
2019-05-16Document the archives handling implementation's detailsjvoisin
2019-05-16Use memoization get _*_path() functionsjvoisin
This shouldn't make a big difference in the CLI/extension usage, but might improve the performances of long-running instances, or people misusing the API.
2019-05-14Please mypy wrt. the last two commitsjvoisin
2019-05-13Rework the dependency checks to distinguish required/optional onesAntoine Tenart
Rework the dependencies definition to include a 'required' flags, which is passed by the check_dependencies helper to the callers, so that they can distinguish between required and optional dependencies. This help in two ways: - The unit test for the dependencies was now failing when an optional one was missing, due to a previous rework. - Mat2's --check-dependencies was referring to "required dependencies" and was misleading for the user as some of them could be optional. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-05-13tests: libmat2: RuntimeError cannot be thrown by chech_dependenciesAntoine Tenart
Remove the try/except logic when calling check_dependencies, as it cannot throw the exception anymore (it's caught already in the function). Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-05-13Please pylintjvoisin
2019-05-13Improve a bit the debug modejvoisin
2019-05-11Document how mat2 compares to other softwarejvoisin
2019-05-10Bump the changelog0.9.0jvoisin
2019-05-09Test the cli's behaviour with valid and invalid filesjvoisin
This should ensure that if we decide to implement some threading in the cli, a faulty file won't break everything.
2019-05-09Minor code cleanupjvoisin
2019-05-08Fix an erroneous errors messagejvoisin
This one was spotted by @fuzzy