security-and-privacy/mat2
security-and-privacy
/
mat2
mirror of
1
0
Fork 0
Code Releases Activity
152 Commits 1 Branch 26 Tags 12 MiB
Commit Graph

152 Commits

Author SHA1 Message Date
jvoisin dfccf79f22 Bump the changelog 2018-06-21 23:34:12 +02:00
jvoisin 8810564b8e Fix some deprecated directives in the COTNRIBUTING.md file 2018-06-21 23:33:56 +02:00
jvoisin 5b38bd7ccd Improve the reliability of the office parser 2018-06-21 23:18:59 +02:00
jvoisin 846a261465 Fix some linter warnings 2018-06-21 23:07:21 +02:00
jvoisin 09e748fa4c Refactor how offices files are handled 
- xml files are no longer considered harmless
- Factorization of the `remove_all` method for office files
- Explicit whitelist are used
- Blacklist are used to skip files completely
  - Non-blacklisted files are _still cleaned_
  - Unsupported files are still triggering an error
 2018-06-21 23:02:41 +02:00
jvoisin a89dae054a Minor simplification of the office-related code 2018-06-21 21:24:53 +02:00
jvoisin c1f4426612 Improve the threat-model again, thanks to @joe 2018-06-20 00:10:21 +02:00
jvoisin 120c3bf72f Improve a bit our threat model 2018-06-19 23:39:06 +02:00
jvoisin 84277740a9 Add fedora in the CI 
refactor
 2018-06-19 00:01:28 +02:00
Antoine Tenart 3a776ff1ca README: software is always singular 
Fix on small typo. Cosmetic patch.

Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
 2018-06-18 23:49:54 +02:00
Antoine Tenart cce5de82e5 libmat2: harmless: add the text/xml mime type 
Fedora defines the 'text/xml' mime type for xml files. Adds this mime
type to the harmless parser.

Fixes #36.

Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
 2018-06-12 21:34:47 +02:00
Antoine Tenart 484e26dd9c libmat2: audio: add the audio/x-flac mime type 
The FLAC parser looks for the 'audio/flac' mime type, but Fedora
defines 'audio/x-flac' in /etc/mime.types for FLAC files. Add this mime
type to the audio parser.

Fixes #36.

Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
 2018-06-12 21:34:47 +02:00
Antoine Tenart 3359f36b67 README: fix one typo 
Fixes one small typo in the README.

Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
 2018-06-12 18:59:51 +02:00
Antoine Tenart c19cbc48e2 README: fix the Jessie python3 URL 
Fixes the scheme in Jessie's Python3 URL.

Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
 2018-06-12 18:59:03 +02:00
Antoine Tenart 6f8427abf9 README: remove extra empty spaces 
This patch removes extra empty spaces at the end of some lines in
README.md. This is a cosmetic patch.

Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
 2018-06-12 18:55:22 +02:00
jvoisin 4600ce3490 Improve a bit the coverage 2018-06-10 20:20:45 +02:00
jvoisin 545887af98 Minor code simplification 2018-06-10 20:20:32 +02:00
jvoisin 7dad77a785 Make the parsing of office format's metadata more robust 2018-06-10 20:20:00 +02:00
jvoisin 8c7979aae3 Add some tests for non-supported embedded fileformats 2018-06-10 20:19:35 +02:00
jvoisin b310a18e69 Add branch coverage to the CI 2018-06-10 01:02:21 +02:00
jvoisin 87bdcd1a95 Improve a bit our coverage wrt. torrent files handling 2018-06-10 00:56:55 +02:00
jvoisin 3c56fa3237 Improve a bit the performances wrt. image's metadata display 2018-06-10 00:43:38 +02:00
jvoisin 9c7aa34f50 Bump a bit the coverage 2018-06-10 00:43:25 +02:00
jvoisin e81ce6cd1a Fix and add a test for explicitly non-supported formats 2018-06-10 00:28:43 +02:00
jvoisin 633654376a Improve a bit parsers autoloading 2018-06-10 00:28:26 +02:00
jvoisin 0079b4e8e9 Improve a bit how we're handling "problematic" files in the CLI 2018-06-10 00:07:49 +02:00
jvoisin 3cba2944d7 Remove the badges 
They are now living directly in the gitlab instance.
 2018-06-10 00:06:38 +02:00
jvoisin aa42b905d5 Speed up a bit the processing of get_meta for images with a "regular" name 2018-06-08 23:30:12 +02:00
jvoisin e86e8e3c23 Improve the code to handle problematic filenames 2018-06-08 17:34:53 +02:00
jvoisin 11261c3d87 Document the fact that tests for MR are appreciated 2018-06-07 00:11:50 +02:00
jvoisin 1adb6c0f2e Add a security contact 2018-06-07 00:09:53 +02:00
jvoisin 6a832a4104 Prevent exiftool-based parameter-injection 2018-06-06 23:50:25 +02:00
jvoisin fa6c06ed8a Add some links into the readme 2018-06-04 23:50:55 +02:00
jvoisin 8368de7fa7 Sort the output of `mat2 -l` 2018-06-04 23:32:13 +02:00
jvoisin 6a1b0b31f0 Add more typing and use mypy in the CI 2018-06-04 23:20:30 +02:00
jvoisin 4ebf9754f8 Import the dynamic import system 
The dynamic import should now work when MAT2 is
installed system-wide, either via the distribution's
packaging system, or via pip.
 2018-06-04 20:53:21 +02:00
jvoisin e71eff4814 Make bandit happier too. 2018-06-04 20:46:22 +02:00
jvoisin d1392de6f5 Make pyflakes happier 2018-06-04 20:43:28 +02:00
totallylegit 183667a7f9 Improve a bit the typing, again 2018-06-04 20:39:27 +02:00
totallylegit 8143b63ee3 Improve a return type annotation 2018-06-04 20:29:41 +02:00
jvoisin 7d5e972493 Fix a typo in setup.py, thanks to Jonas Meurer 2018-05-23 01:29:49 +02:00
jvoisin 941e4b1586 Update the release process now that we have a setup.py file 2018-05-21 22:53:48 +02:00
jvoisin 1843d05a29 Give a first shot at writing a setup.py file 2018-05-21 22:52:42 +02:00
jvoisin d5e00211db Improve a bit the gitignore file 2018-05-21 22:50:36 +02:00
jvoisin 8cf9aeeb67 Rename mat2.py to mat2 2018-05-21 22:49:40 +02:00
jvoisin 38fae60b8b Rename some files to simplify packaging 
- the `src` folder is now `libmat2`
- the `main.py` script is now `mat2.py`
 2018-05-18 23:52:40 +02:00
jvoisin 57d5cd0428 Bump the changelog 2018-05-16 23:11:18 +02:00
jvoisin fa7d18784c Do a pylint pass 2018-05-16 22:36:59 +02:00
jvoisin 0354c3b7e3 Add a test about unsupported files 2018-05-16 22:10:47 +02:00
jvoisin effe68f08f The CLI shouldn't display unsupported file extensions 2018-05-16 22:00:37 +02:00