Skip to content

DocFence 0.63.0

Choose a tag to compare

View all tags
@SybilGambleyyu SybilGambleyyu released this 06 Aug 15:22
v0.63.0
3e7522a

Hardens the bounded OPC package-signature topology checks around XMLDSIG transform declarations.

  • Rejects attributes on ds:Transforms and requires each ds:Transform to declare exactly its Algorithm attribute, wherever those declarations occur in a recognized OPC package signature.
  • This is deliberately structural hardening, not full XMLDSIG transform/schema/cryptographic validation.
  • Validated by 73 tests, successful main and tag CI matrices, and exact unchanged profiles across the 29-document OOXML Signature Security corpus (63 Transforms containers and 101 Transform declarations).
  • Independently reproducible artifacts: wheel SHA-256 8e32d8430a3cb26ca31962d68a23a145ada0ed1f2aca89f148bc76ca4572ff9e; source SHA-256 58874ca4548ba0aeca4b8797c587d7cf3cc598a71b4761ac42c5e107510f56b4.
Assets 4
Loading