PDF metadata is now physically removed, not just hidden.
Local Docker testing (exiftool + qpdf) revealed that exiftool -all= on a PDF only marks metadata deleted — it stays recoverable in the file, and exiftool itself warns "deleted tags may be recovered." Exifix now follows up with qpdf --linearize on PDFs (when qpdf is available) to rewrite the file so the data is gone for good.
- Verified with
docker/test-plugin-pdf.php: the sensitive value disappears from the raw PDF bytes, not just exiftool's view. - New qpdf row on Tools → Exifix, plus a warning when exiftool is present but qpdf is not (PDF stripping is then best-effort/reversible — ask your host to install qpdf).
- Images and video stripping were confirmed correct as-is.
This resolves the last open question (Q4) — PDF/video paths are now tested.
Install: download exifix-0.6.0.zip → Plugins → Add New → Upload Plugin.
See CHANGE_LOG.md.