Skip to content

v1.7.6

Choose a tag to compare

View all tags
@stwhwing stwhwing released this 12 Sep 07:40
· 4 commits to main since this release
v1.7.6
d49d358

markitdown-skill v1.7.6

Security hardening release (public package).

Changed

  • MARKITDOWN_BIN now goes through a strict allowlist. The override is honoured only when it is an absolute path to a regular file; on POSIX it must additionally be executable and not group-/world-writable. Anything else is ignored and the trusted python -m markitdown module path is used. Closes the "redirect execution via a writable environment variable" hole.
    • Note: on Windows there is no POSIX mode bit, so the check there is "absolute path to a regular file" (documented honestly).
  • Documentation clarified: sandbox-first headless rendering (--no-sandbox is only an automatic fallback for root / crashing sandboxes, never a user flag) and --allow-internal as an explicit, off-by-default opt-in for trusted local development.

Verification

  • static-analysis: clean, 0 findings
  • Redline / de-privatisation scan: 0 hits on all three artifacts
  • Deterministic test matrix: Windows behaviour 8/8, simulated POSIX branch 5/5
Assets 3
Loading