mirror of
https://github.com/storytold/pdfcraft.git
synced 2026-11-10 18:31:10 -06:00
proposal(redact): prevent retention of confidential vector paths behind clipping (F-008) (#4577)
Partial vector redaction previously hid covered areas with clipping (`clip_out`, `W/W*`) while retaining the complete original drawing instructions and painting operators in the content stream. This allowed recipients to recover confidential outlined text or other vector drawings from supposedly redacted documents. This change removes vector paths that intersect redaction marks completely and refuses partial clip retention, ensuring no confidential geometry is preserved behind clipping. Report counts are updated to record removed paths.
This commit is contained in:
@@ -5793,7 +5793,7 @@ status = "shipped"
|
||||
commands = ["redact.apply"]
|
||||
tools = ["redact_apply"]
|
||||
evidence = ["crates/redact/src/tests.rs::vectors_are_removed_or_clipped_and_inline_images_go"]
|
||||
notes = "covered paths removed, others clipped; shadings clipped"
|
||||
notes = "intersecting paths removed to avoid leaking geometry behind clipping; shadings clipped"
|
||||
|
||||
[[feature]]
|
||||
id = "protect.redact-annots-fields"
|
||||
|
||||
Reference in New Issue
Block a user