summaryrefslogtreecommitdiff
path: root/libmat2 (follow)
AgeCommit message (Collapse)Author
2019-10-12Remove useless parenthesisjvoisin
2019-10-12Replace abstractstaticmethod with abstractmethodjvoisin
Apparently, abstractstaticmethod is deprecated since python3.3.
2019-10-05Mount a new tmpfs on /tmp and drop all capabilitiesmadaidan
This mounts a new tmpfs on /tmp so any files residing there would be hidden from the sandbox. Many programs store some files in there that might be useful to an attacker. It also drops all capabilities incase it is ever run with extra capabilities for whatever reason.
2019-09-21Fix bubblewrapjvoisin
On some machines (like mine), `/proc` has to be mounted. Also, since sandboxing with bubblewrap is best effort and assumes that an attacker doesn't have control outside of the file to clean, it's safe to __try__ to enable some bubblewrap features, and to silently fail otherwise.
2019-09-01Mark a comment as FPjvoisin
2019-09-01Add support for ppmjvoisin
2019-09-01Improve a bit the comments in the codejvoisin
This is related to the previous commit
2019-09-01Remove nsid fields from MSOffice documentsjvoisin
nsids are random identifiers, usually used to ease merging between documents, and can trivially be used for fingerprinting.
2019-07-22Remove a mypy workaround to bump coverage back to 100%jvoisin
2019-07-22Add a test for svg namespacejvoisin
2019-07-22CI: Add job to run codespell, a spell checking softwaregeorg
2019-07-20Fix mypyjvoisin
2019-07-13Please mypyjvoisin
2019-07-13Add support for svgjvoisin
2019-07-13Compress cleaned zip archives by defaultjvoisin
2019-07-13Please mypyjvoisin
2019-05-16Use memoization get _*_path() functionsjvoisin
This shouldn't make a big difference in the CLI/extension usage, but might improve the performances of long-running instances, or people misusing the API.
2019-05-14Please mypy wrt. the last two commitsjvoisin
2019-05-13Rework the dependency checks to distinguish required/optional onesAntoine Tenart
Rework the dependencies definition to include a 'required' flags, which is passed by the check_dependencies helper to the callers, so that they can distinguish between required and optional dependencies. This help in two ways: - The unit test for the dependencies was now failing when an optional one was missing, due to a previous rework. - Mat2's --check-dependencies was referring to "required dependencies" and was misleading for the user as some of them could be optional. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-05-09Minor code cleanupjvoisin
2019-05-03typofuzzy
2019-05-01Add some verification for "dangerous" tarfilesjvoisin
2019-04-27Handle weird permissions in tar archivesjvoisin
2019-04-27Improve the display of tarfile's members mtimejvoisin
2019-04-27Add support for compressed tar filesjvoisin
2019-04-27Add tar archive supportjvoisin
2019-04-14Add support for xhtml filesjvoisin
2019-03-30Please mypyjvoisin
Apparently, mypy isn't able (yet?) to deal with variables that are changing their types at runtime. Python is wonderful.
2019-03-29libmat2: fix dependency checks for cmd line utilitiesAntoine Tenart
The command line checks for command line utilities are done by trying to access the executables and by throwing an exception when not found. This lead to: - The mat2 cmd line --check-dependencies option failing. - The ffmpeg unit tests failing when ffmpeg isn't installed (even though it's an optional dependency). This patch fixes it. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-03-29libmat2: reshape the dependencies listAntoine Tenart
Invert the keys and values in DEPENDENCIES. It seems more natural to use the key as a key in check_dependencies(), and the value as the value. This also help in preparing for reworking the check_dependencies() helper. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-03-23Fix the testsuitejvoisin
2019-03-23libmat2: audio: not all id3 types have a text attributeAntoine Tenart
Not all id3 types have a text attribute (such as mutagen.id3.APIC or mutagen.id3.UFID). This leads to the get_meta helper to crash when trying to access the text attribute of an object which does not have it. Fixes it by checking the text attribute is available before accessing it. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2019-03-05Refactor {black,white}list into {block,allow}listBrolf
Closes #96
2019-03-01fix typogeorg
2019-02-27Improve the previous commitjvoisin
- More tests - More documentation - Minor code cleanup
2019-02-27Improve epub supportjvoisin
2019-02-25Document the previous commitjvoisin
2019-02-24In archive-based formats, the `mimetype` file comes firstjvoisin
This should improve epub compatibility, along with other formats as a side-effect
2019-02-23<title> is also an html metadatajvoisin
2019-02-23Fix a bug in css cleaningjvoisin
It's not mandatory to actually have a comment inside comment delimiter, like `/**/`.
2019-02-20Implement epub supportjvoisin
2019-02-10Make the mandatory metadata warning genericjvoisin
This should close #95.
2019-02-09Streamline a bit the previous commitjvoisin
2019-02-09bind mount /etc/ld.so.cache to the sandboxPoncho
without /etc/ld.so.cache available in the sandbox, tests fail on gentoo with: /usr/bin/ffmpeg: error while loading shared libraries: libstdc++.so.6: cannot open shared object file: No such file or directory
2019-02-08Improve a bit get_meta for libreoffice filesjvoisin
2019-02-08Add support for html filesjvoisin
2019-02-07Use of the archive refactoring for the office documents toojvoisin
2019-02-04Refactor a bit office get_meta handlingjvoisin
This should make easier to get more metadata from archive-based file formats.
2019-02-03Implement .gif supportjvoisin
2019-02-03Whenever possible, use bwrap for subprocessesintrigeri
This should closes #90