sirdave73 51d39fead1 C2 SSRF fix: pre-validate HTML resource refs before WeasyPrint render ...

WeasyPrint's image loader swallows per-fetch errors and renders a broken
image, so a job could report DONE while a remote URL was contacted
(SSRF/data egress against the no-data-egress guarantee). Add
scan_for_remote() which rejects http(s)/ftp/ws/wss/file resource
references up-front (ValueError -> job error) before WeasyPrint ever
runs; local data: URIs still render via the default loader. Also add
tests/test_review_findings_20260903.py (remote -> job error, valid
data: -> job done).

2026-09-04 00:18:17 -04:00

..

__init__.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

conftest.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

helpers.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_cli.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_convert_api.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_edge_cases.py

any-file to PDF (Phase 1): converters/ dispatcher, images/text/md/csv/json/xml/svg/pdf-passthrough, 112 tests green

2026-09-02 01:53:24 -04:00

test_fidelity.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_health_index.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_job_registry.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_multi_format.py

any-file to PDF (Phase 2, Chunk A): pandoc converters for docx/odt/rtf/tex/latex/org/adoc/rst, 27 formats, 126 tests green

2026-09-02 21:55:22 -04:00

test_pandoc.py

any-file to PDF (Phase 2, Chunk A): pandoc converters for docx/odt/rtf/tex/latex/org/adoc/rst, 27 formats, 126 tests green

2026-09-02 21:55:22 -04:00

test_parse_opf.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00

test_review_findings_20260903.py

C2 SSRF fix: pre-validate HTML resource refs before WeasyPrint render

2026-09-04 00:18:17 -04:00

test_review_fixes.py

epub2pdf: title-based export names, .pdf download headers, security hardening (68 tests green)

2026-08-30 09:03:39 -04:00