All notable changes to this project will be documented in this file.
✨ New features
- Add a sample HTTP Server service
- Update Apache POI to 3.16
- Compile to native Windows and Linux apps thanks to Excelsior Jet
- Office: Properly remove Compound objects and remove the "has macros" flag on Excel files
- PDF: Improve sanitation and password checking method
- API: Add a ThreatBuilder
- API: Let the API depend on SLF4J-api instead of an implementation
- Improved tests
🐛 Bug fixes
- Archive: Don't copy the compression method
- Office: Remove compound objects
- Office: Don't log when file is invalid
🔥 Backward incompatible changes
- Modules are no more shaded by default
- The PDF Bleach now handles embedded files, and sanitizes them!
- Office: The
UnsupportedFileFormatExceptionis now handled correctly
- Modules are no more shaded by default
- Add Coverity scan for tagged commits
- Copy OOXML files into memory before processing them, and rollback on failure
- Improved logging, and minor bugs fixed (involving zip, mainly)
- New project logo and CHANGELOG file
- Archive Bleach added to handle zip files, recursively sanitising the files
- Code cleaned up to match conventions
- API changed: package names and methods changed.
- Total rewrite of the DocBleach API, with a threat model (cf #2)
- -json option for the command line tool (cf #3)
- Office Open XML: Main part's content type is rewritten (cf #6)
- A SecurityManager is set when using the command line tool, preventing some exploits
- New wiki page: Advanced Usage
- Fixed typos in the readme
- Whole API is rewritten.
A regression was introduced in commit 271f1e60, preventing OOXML files from being sanitized.
That's all.
- Code is now split into independent Maven modules: api, cli and the bleaches (see #2)
- Improved logging of the exceptions (see #3)
- Automatic SonarQube and SourceClear scans
- Updated dependencies
- Artifacts are pushed on Maven to Central
- 🎉 OOXML Bleach rewritten - now filters using relations and content types
- A bug corrupting .docm files has been fixed — #5
- Fixed typos in the readme
- Batch mode has been removed
-indoes not handle network files anymore, because of the added code maintenance required (SSL checks, ...)
🎉 This is the first release of the DocBleach project. May there be plenty!
- Office Open XML
- OLE2
- RTF