sirdave73/epub2pdf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
19 Commits 2 Branches 0 Tags
de39bafb43bc66abeecd1d9161ee713bc9e116f7
Commit Graph
11 Commits
Author SHA1 Message Date
sirdave73 de39bafb43 docs: add README.md (front-door onboarding doc) and bump version 2.1.2 -> 2.1.3 2026-09-05 07:21:56 -04:00
sirdave73 ba7a772e52 fix ui tighten spacing between trust line and render-mode capsule and add gap before drop box; bump 2.1.1 -> 2.1.2
Test / Tests (Python 3.12) (pull_request) Canceled after 0s
Details
2026-09-04 22:24:18 -04:00
sirdave73 4f75178916 fix ui remove doubled v in version footer and bump to 2.1.1
Test / Tests (Python 3.12) (push) Canceled after 0s
Details
2026-09-04 21:30:24 -04:00
sirdave73 100c9af72d feat(ui): standalone render-mode toggle above upload box + version 2.1.0 
- Move High Quality / Fast segmented toggle out of the clickable upload
  zone into a standalone .render-control so clicking the drop box only uploads
- Update JS selector to .render-control; progressive disclosure keeps the
  toggle hidden for non-office files, visible for .docx/.odt/.rtf
- Version bump 2.0.0 -> 2.1.0 (dev-test branch save rule: bump version on save)
 2026-09-04 21:17:23 -04:00
Amelia 069dab0411 feat(render-mode): Rich (LibreOffice) vs Standard (pandoc) toggle for office formats (.docx/.odt/.rtf); Rich default; 5 office tests; 152/152 green"
Test / Tests (Python 3.12) (push) Canceled after 0s
Details
2026-09-04 17:31:26 -04:00
sirdave73 fa558ccfb3 UI redesign v2: modern ant/mono design + app version (v2.0.0)
Test / Tests (Python 3.12) (push) Canceled after 0s
Details
2026-09-04 07:22:43 -04:00
sirdave73 7ea2b2baad H1+M2 review findings: CSV 5000x50 render cap (truncated with note) + stale output sweep; 4 regression tests (H1x3, M2x1); USER_GUIDE truncation docs
Test / Tests (Python 3.12) (push) Canceled after 0s
Details
2026-09-04 06:34:20 -04:00
sirdave73 72b5f2f0dd C1+C3 review findings: streaming decompression-bomb guard + stored-XSS stripping
Test / Tests (Python 3.12) (push) Canceled after 0s
Details 
C1 (decompression bomb): wire the shared common._copy_stream_with_cap into both
zip-extraction paths. app.py._safe_extract_zip now streams each EPUB member with
a WRITTEN-byte counter (app.py:456) instead of an unbounded copyfileobj, so a
member that inflates a small header into a huge stream is stopped mid-write.
pandoc_converter._validate_office_zip now streams every member's decompressed
bytes through the same guard (pandoc_converter.py:134) before pandoc reads them.

C3 (stored XSS): common.html_to_pdf_bytes now strips stored-XSS vectors via
common._strip_scripts (common.py:320) BEFORE WeasyPrint renders, so every
non-pandoc render path (html, svg, epub, md, csv, xml) neutralizes <script>/
<iframe> content, on* handlers and javascript:/vbscript: URLs. Regression tests
added to tests/test_review_findings_20260903.py (C1 unit+e2e, C3 unit+e2e).
 2026-09-04 02:25:07 -04:00
sirdave73 b19d8d3f52 any-file to PDF (Phase 2, Chunk A): pandoc converters for docx/odt/rtf/tex/latex/org/adoc/rst, 27 formats, 126 tests green 2026-09-02 21:55:22 -04:00
sirdave73 345c39417b any-file to PDF (Phase 1): converters/ dispatcher, images/text/md/csv/json/xml/svg/pdf-passthrough, 112 tests green 2026-09-02 01:53:24 -04:00
BMad Master 5580004aeb epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green) 2026-08-30 09:03:39 -04:00