Skip to content

DocFence 0.51.0

Choose a tag to compare

View all tags
@SybilGambleyyu SybilGambleyyu released this 06 Aug 08:51
v0.51.0
2c0133a

DocFence 0.51 tightens the structural OPC package-signature boundary.

  • A recognized XML signature now requires its one SignedInfo/CanonicalizationMethod/@Algorithm to be exactly XML C14N or XML C14N with comments, the two methods OPC permits.
  • A missing or other URI fails the XML-signature shape closed.
  • This remains stored-syntax validation only: DocFence does not execute canonicalization, validate a SignatureMethod, recompute digests, verify XMLDSIG, or make a trust decision.

Validation included the full 69-test suite; a byte-identical aggregate inventory comparison against 0.50 across 29 public USENIX OOXML Signature Security DOCX fixtures; and an isolated wheel check that accepts both allowed URIs and rejects an unsupported mutation.

Assets 4
Loading