Skip to content

DocFence 0.49.0

Latest

Choose a tag to compare

@SybilGambleyyu SybilGambleyyu released this 04 Aug 10:20

DocFence 0.49 rejects XMLDSIG ds:XPath elements from transforms participating in its bounded OPC declared-coverage chain. OPC disallows XPath filtering even though the generic XMLDSIG Transform schema permits it.

A parameter on the package-object binding now leaves declaration coverage unavailable. A parameter on a manifest part or relationship reference is aggregate unsupported and cannot grant part or partial selector coverage. This is structural parsing only: DocFence does not parse or execute XPath or verify cryptographic signatures.

Validated with 69 tests, fresh wheel and source-distribution installs, DCAB adapter coverage, and the public USENIX OOXML Signature Security corpus.