Commit Graph
4 Commits
Author SHA1 Message Date
sirdave73 51d39fead1 C2 SSRF fix: pre-validate HTML resource refs before WeasyPrint render
Test / Tests (Python 3.12) (push) Canceled after 0s
WeasyPrint's image loader swallows per-fetch errors and renders a broken
image, so a job could report DONE while a remote URL was contacted
(SSRF/data egress against the no-data-egress guarantee). Add
scan_for_remote() which rejects http(s)/ftp/ws/wss/file resource
references up-front (ValueError -> job error) before WeasyPrint ever
runs; local data: URIs still render via the default loader. Also add
tests/test_review_findings_20260903.py (remote -> job error, valid
data: -> job done).
2026-09-04 00:18:17 -04:00
sirdave73 b19d8d3f52 any-file to PDF (Phase 2, Chunk A): pandoc converters for docx/odt/rtf/tex/latex/org/adoc/rst, 27 formats, 126 tests green 2026-09-02 21:55:22 -04:00
sirdave73 345c39417b any-file to PDF (Phase 1): converters/ dispatcher, images/text/md/csv/json/xml/svg/pdf-passthrough, 112 tests green 2026-09-02 01:53:24 -04:00
BMad Master 5580004aeb epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green) 2026-08-30 09:03:39 -04:00