oracola91 8fd1c1716f PDF export drops javascript:, vbscript:, data: and network-share links ...

A slide hyperlink from an untrusted deck became a PDF link whatever it
pointed at. Script and data links, and links to another machine (UNC
\\host\share, //host/share, file://host/...), are now left out of the
PDF; the text stays. On Windows, opening a network path sends the
user's NTLM credentials to that host.

Web, mail, local file: and relative links are kept. The scheme is read
the way a browser reads it: control characters dropped, leading spaces
trimmed, any case. The slide show already refuses these links
(safe_url), and cadcraft's PDF export drops script and data links.

2026-10-24 13:27:00 +03:00

..

anim

refactor: explicit imports for table modules (SonarCloud S2208) (#1262)

2026-10-24 04:43:36 -04:00

av1

refactor: explicit imports for table modules (SonarCloud S2208) (#1262)

2026-10-24 04:43:36 -04:00

bitstream

Media: use craft-media for bitstream, isobmff and matroska (#1034)

2026-10-23 19:29:43 -04:00

color

Reject non-hex characters such as '+' in Rgba::from_hex

2026-10-19 05:34:48 +00:00

engine

security(engine): check regular file and size bound on read, preserve permissions and symlinks on save (#1265)

2026-10-24 04:45:48 -04:00

fonts

chore: resolve SonarCloud maintainability issues (#1255)

2026-10-23 23:28:09 -04:00

format

chore: resolve SonarCloud maintainability issues (#1255)

2026-10-23 23:28:09 -04:00

geom

Add angle adjust handles to partial-circle presets

2026-10-21 05:04:04 +00:00

h264

refactor: explicit imports for table modules (SonarCloud S2208) (#1262)

2026-10-24 04:43:36 -04:00

hevc

refactor: explicit imports for table modules (SonarCloud S2208) (#1262)

2026-10-24 04:43:36 -04:00

isobmff

Media: use craft-media for bitstream, isobmff and matroska (#1034)

2026-10-23 19:29:43 -04:00

matroska

Media: use craft-media for bitstream, isobmff and matroska (#1034)

2026-10-23 19:29:43 -04:00

mcp

CI: one test binary per crate, nextest, line tables only (#1213)

2026-10-23 12:43:34 -04:00

media

security: use exclusive temporary directories for macOS cert import and media fixtures (#1263)

2026-10-24 04:40:26 -04:00

metafile

security(metafile): harden EMF+ parsing, clipping complexity, and memory accounting (#1280)

2026-10-24 05:06:04 -04:00

model

perf(chart): optimize axis plotted extent scan and cache non-bar error bar stats (#1266)

2026-10-24 04:41:23 -04:00

ogg

Codecs: a hostile number is a format error, not an overflow

2026-10-13 20:16:51 +03:00

opus

refactor: explicit imports for table modules (SonarCloud S2208) (#1262)

2026-10-24 04:43:36 -04:00

pdf

PDF export drops javascript:, vbscript:, data: and network-share links

2026-10-24 13:27:00 +03:00

pptx

fix(pptx): harden import resource budgets, deduplication, and lookup caching (#1283)

2026-10-24 06:01:30 -04:00

render

security(metafile): harden EMF+ parsing, clipping complexity, and memory accounting (#1280)

2026-10-24 05:06:04 -04:00

text

security: clamp alpha_num bullet expansion and sanitize filename logging (#1264)

2026-10-24 04:40:29 -04:00

ui-egui

refactor: replace redundant closures with method paths (SonarCloud S1612) (#1261)

2026-10-24 04:27:07 -04:00

vp9

refactor: explicit imports for table modules (SonarCloud S2208) (#1262)

2026-10-24 04:43:36 -04:00