Skip to content

FormulaFence 0.223.0

Choose a tag to compare

View all tags
@SybilGambleyyu SybilGambleyyu released this 03 Aug 10:47
v0.223.0
9d25a49

Tightens the OPC package-signature relationship-selector boundary without making a cryptographic or trust claim.

  • Counts a Relationships Transform selector as declared package scope only when XML C14N (with or without comments) follows it immediately.
  • Fails closed for missing, reordered, or unsupported following transforms through the existing redacted FF010/FF050 coverage path.
  • Adds privacy regressions for an equal-count RelationshipReference SourceId retarget, missing C14N, and C14N-with-comments.

The release does not execute XML transforms or verify digest values, signatures, certificates, identities, trust chains, or consumer decisions.

Assets 4
Loading