summaryrefslogtreecommitdiff
path: root/libmat2 (follow)
AgeCommit message (Collapse)Author
2020-03-08Vastly improve ppt compatibilityjvoisin
2020-03-07Improve compatibility with MS Office of cleaned pptjvoisin
2020-03-07Improve a bit ppt supportjvoisin
2020-03-07Improve a bit the support of ppt filesjvoisin
2020-02-11Add which pathfinding for executablestguinot
2020-02-08Remove a couple of residual metadata in pdfjvoisin
This commit takes care of removing residual metadata added by mat2 during the cleaning of pdf.
2020-01-01Add support for wav filesjvoisin
2019-12-29Please mypyjvoisin
Mypy doesn't like some annotation in web.py, this commits aims at pleasing it.
2019-12-18sandbox: stop mounting new filesystem on /tmpIvy Fay
Mounting new, empty filesystem on /tmp makes impossible to use mat2 for manipulating files stored there. Especially it breaks running tests while creating package and using /tmp as temporary builddir which is common setup in Arch Linux: https://aur.archlinux.org/packages/mat2/#comment-721221
2019-12-16Handle tiff images with a .tif extensionjvoisin
2019-12-15Improve the reliability of Exiftool-base parsersjvoisin
2019-12-15Improve the reliability of Gdk-based parsersjvoisin
2019-12-15Improve the reliability of PNG parsingjvoisin
2019-12-15Improve the robustness of the HTML parserjvoisin
2019-12-15Improve the robustness of the CSS parserjvoisin
2019-11-30Improve a bit ppt supportjvoisin
2019-11-30Improve a bit odt handlingjvoisin
2019-11-30This is mat2, not MAT2georg
Closes #131
2019-11-26Please the new version of pylintjvoisin
2019-10-17Improve a bit the support for ppt filesjvoisin
2019-10-12Add a way to disable the sandboxjvoisin
Due to bubblewrap's pickiness, mat2 can now be run without a sandbox, even if bubblewrap is installed.
2019-10-12Refactor testsjvoisin
2019-10-12Remove a useless `\`jvoisin
2019-10-12Remove useless parenthesisjvoisin
2019-10-12Replace abstractstaticmethod with abstractmethodjvoisin
Apparently, abstractstaticmethod is deprecated since python3.3.
2019-10-05Mount a new tmpfs on /tmp and drop all capabilitiesmadaidan
This mounts a new tmpfs on /tmp so any files residing there would be hidden from the sandbox. Many programs store some files in there that might be useful to an attacker. It also drops all capabilities incase it is ever run with extra capabilities for whatever reason.
2019-09-21Fix bubblewrapjvoisin
On some machines (like mine), `/proc` has to be mounted. Also, since sandboxing with bubblewrap is best effort and assumes that an attacker doesn't have control outside of the file to clean, it's safe to __try__ to enable some bubblewrap features, and to silently fail otherwise.
2019-09-01Mark a comment as FPjvoisin
2019-09-01Add support for ppmjvoisin
2019-09-01Improve a bit the comments in the codejvoisin
This is related to the previous commit
2019-09-01Remove nsid fields from MSOffice documentsjvoisin
nsids are random identifiers, usually used to ease merging between documents, and can trivially be used for fingerprinting.
2019-07-22Remove a mypy workaround to bump coverage back to 100%jvoisin
2019-07-22Add a test for svg namespacejvoisin
2019-07-22CI: Add job to run codespell, a spell checking softwaregeorg
2019-07-20Fix mypyjvoisin
2019-07-13Please mypyjvoisin
2019-07-13Add support for svgjvoisin
2019-07-13Compress cleaned zip archives by defaultjvoisin
2019-07-13Please mypyjvoisin
2019-05-16Use memoization get _*_path() functionsjvoisin
This shouldn't make a big difference in the CLI/extension usage, but might improve the performances of long-running instances, or people misusing the API.
2019-05-14Please mypy wrt. the last two commitsjvoisin
2019-05-13Rework the dependency checks to distinguish required/optional onesAntoine Tenart
Rework the dependencies definition to include a 'required' flags, which is passed by the check_dependencies helper to the callers, so that they can distinguish between required and optional dependencies. This help in two ways: - The unit test for the dependencies was now failing when an optional one was missing, due to a previous rework. - Mat2's --check-dependencies was referring to "required dependencies" and was misleading for the user as some of them could be optional. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-05-09Minor code cleanupjvoisin
2019-05-03typofuzzy
2019-05-01Add some verification for "dangerous" tarfilesjvoisin
2019-04-27Handle weird permissions in tar archivesjvoisin
2019-04-27Improve the display of tarfile's members mtimejvoisin
2019-04-27Add support for compressed tar filesjvoisin
2019-04-27Add tar archive supportjvoisin
2019-04-14Add support for xhtml filesjvoisin