Skip to content

DocFence 0.21.0

Choose a tag to compare

@SybilGambleyyu SybilGambleyyu released this 01 Aug 12:15

DocFence 0.21.0 adds a privacy-safe inventory for direct DrawingML linked-picture markers (a:blip r:link) in supported Word stories.

  • Adds the word_drawing_linked_pictures profile inventory and change signal.
  • Adds DFP055 (require no linked pictures) and DFP056 (protect an approved linked-picture baseline).
  • Separates direct linked-picture markers from generic external relationships, r:embed-only images, hyperlink fields, direct Word hyperlinks, and DrawingML hyperlink actions.
  • Reports only aggregate marker/story and backing image-relationship classification counts; image targets, relationship IDs, surrounding drawing markup, and story paths remain private.
  • Does not retrieve, resolve, update, render, or claim a Word client will load a linked image.

Validation: 47 tests; lint; hosted Python 3.11 and 3.13 CI for the release commit and tag; reproducible wheel/source builds; package checks; and an isolated-wheel smoke profile of a pinned public linked-picture DOCX.

See the tagged policy reference, threat model, and validation notes for the exact boundary.