summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-10-12Remove a useless `\`jvoisin
2019-10-12Remove useless parenthesisjvoisin
2019-10-12Fix a test for png's lightweight cleaning on corrupted filesjvoisin
2019-10-12Replace abstractstaticmethod with abstractmethodjvoisin
Apparently, abstractstaticmethod is deprecated since python3.3.
2019-10-05Mount a new tmpfs on /tmp and drop all capabilitiesmadaidan
This mounts a new tmpfs on /tmp so any files residing there would be hidden from the sandbox. Many programs store some files in there that might be useful to an attacker. It also drops all capabilities incase it is ever run with extra capabilities for whatever reason.
2019-09-21Fix bubblewrapjvoisin
On some machines (like mine), `/proc` has to be mounted. Also, since sandboxing with bubblewrap is best effort and assumes that an attacker doesn't have control outside of the file to clean, it's safe to __try__ to enable some bubblewrap features, and to silently fail otherwise.
2019-09-01Mark a comment as FPjvoisin
2019-09-01Add support for ppmjvoisin
2019-09-01Add a test for nsid cleaningjvoisin
2019-09-01Improve a bit the comments in the codejvoisin
This is related to the previous commit
2019-09-01Remove nsid fields from MSOffice documentsjvoisin
nsids are random identifiers, usually used to ease merging between documents, and can trivially be used for fingerprinting.
2019-08-31Add support for inplace cleaningjvoisin
2019-08-01Some arguments of mat2 are mutually exclusivejvoisin
2019-07-22Tweak a bit the cijvoisin
- gentoo and debian with bubblewrap are not allowed to fail anymore - don't run coverage on debian without bubblewrap
2019-07-22Remove a mypy workaround to bump coverage back to 100%jvoisin
2019-07-22Add a test for svg namespacejvoisin
2019-07-22CI: Run bubblewrap tests as different user than 'root' to fix errorsgeorg
It seems, there is a bug somewhere if the test suite is invoked as 'root', and bubblewrap is available.
2019-07-22CI: Add job to run codespell, a spell checking softwaregeorg
2019-07-20Fix mypyjvoisin
2019-07-18Display the filename along with the "No metadata found" messagejvoisin
2019-07-14Nautilus: Add note that distribution packages ship the extensiongeorg
Relates #106
2019-07-14README: Drop note about Debian jessie, which is oldoldstable nowadaysgeorg
As such, hopefully, it's not really used widely anymore. If so, this note isn't really relevant.
2019-07-14README: Add note about the user interfaces providedgeorg
2019-07-14README: Drop note about web disclosure to broaden the possible use casesgeorg
2019-07-13INSTALL: Update Debian package statusgeorg
Also, make the note generic, to omit the need to update it "constantly". Closes #76
2019-07-13Please mypyjvoisin
2019-07-13Add support for svgjvoisin
2019-07-13Compress cleaned zip archives by defaultjvoisin
2019-07-13Please mypyjvoisin
2019-07-10doc/threat_model: this is about mat2, not matgeorg
2019-06-05Parallelize the clijvoisin
2019-05-16Document the archives handling implementation's detailsjvoisin
2019-05-16Use memoization get _*_path() functionsjvoisin
This shouldn't make a big difference in the CLI/extension usage, but might improve the performances of long-running instances, or people misusing the API.
2019-05-14Please mypy wrt. the last two commitsjvoisin
2019-05-13Rework the dependency checks to distinguish required/optional onesAntoine Tenart
Rework the dependencies definition to include a 'required' flags, which is passed by the check_dependencies helper to the callers, so that they can distinguish between required and optional dependencies. This help in two ways: - The unit test for the dependencies was now failing when an optional one was missing, due to a previous rework. - Mat2's --check-dependencies was referring to "required dependencies" and was misleading for the user as some of them could be optional. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-05-13tests: libmat2: RuntimeError cannot be thrown by chech_dependenciesAntoine Tenart
Remove the try/except logic when calling check_dependencies, as it cannot throw the exception anymore (it's caught already in the function). Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-05-13Please pylintjvoisin
2019-05-13Improve a bit the debug modejvoisin
2019-05-11Document how mat2 compares to other softwarejvoisin
2019-05-10Bump the changelog0.9.0jvoisin
2019-05-09Test the cli's behaviour with valid and invalid filesjvoisin
This should ensure that if we decide to implement some threading in the cli, a faulty file won't break everything.
2019-05-09Minor code cleanupjvoisin
2019-05-08Fix an erroneous errors messagejvoisin
This one was spotted by @fuzzy
2019-05-08Allow failure with bubblewrap for nowjvoisin
2019-05-08Add tests to find possible race-conditions in the clijvoisin
2019-05-03typofuzzy
2019-05-01Add some verification for "dangerous" tarfilesjvoisin
2019-04-27Handle weird permissions in tar archivesjvoisin
2019-04-27Improve the display of tarfile's members mtimejvoisin
2019-04-27Add support for compressed tar filesjvoisin