mtlcl410andClaude Opus 5.5 64c5fd8ef0 M6: signing, timestamping and DSS writes carry no Password-field values (#3926) ...

CodeRabbit on #3943: sign, sign_with_timestamp, timestamp_document and dss::embed
each write a new incremental file from editor.cos, outside the writable() boundary
saves use, so a typed Password value was signed into the file. Each now writes from
the writable() copy. The new test signs a form with a typed value and checks the
signed file holds the masked appearance but not the value; the three TSA/DSS paths
need a timestamp server or validation data, and use the same one-line change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 14:38:29 +08:00

..

a11y

Marking a tag as an artifact refuses content past the page's decode budget

2026-10-22 21:33:43 +00:00

annot

Merge main into fix/coderabbit-c5-forms-misc

2026-10-22 22:07:19 -04:00

audit

Merge main into fix/coderabbit-a1-audit

2026-10-22 22:20:45 -04:00

automation

fix(automation): keep page text from tools when copying is not allowed

2026-10-22 13:18:26 -04:00

compare

Rename PrintCraft to PdfCraft (#174)

2026-10-07 16:03:57 -04:00

content

Merge main into fix/coderabbit-c5-forms-misc

2026-10-22 22:07:19 -04:00

cos

Merge pull request #4117 from aiongg/fix/coderabbit-b-caps

2026-10-22 21:38:59 -04:00

create

Merge pull request #4151 from aiongg/fix/coderabbit-c2-edit-organize

2026-10-22 21:57:13 -04:00

crypt

fix(crypt): resolve crypt filter methods once per handler

2026-10-22 17:43:04 +00:00

edit

Merge main into fix/coderabbit-a1-audit

2026-10-22 22:20:45 -04:00

engine

M6: signing, timestamping and DSS writes carry no Password-field values (#3926)

2026-10-23 14:38:29 +08:00

export

Merge upstream/main into fix/coderabbit-c5-forms-misc

2026-10-22 20:51:14 +00:00

filters

A counted decode bounds all filter stages together and counts output before the predictor

2026-10-22 23:33:37 +00:00

fonts

Merge pull request #4117 from aiongg/fix/coderabbit-b-caps

2026-10-22 21:38:59 -04:00

forms

M6: clear Password values inherited from an ancestor or held by a widget (#3926)

2026-10-23 14:38:28 +08:00

geom

M10: Enhance camera image finds the document's edges; rotate, crop or organize after Enhance page (part 3 of #1008) (#1027)

2026-10-11 12:31:23 -04:00

js

fix(js): an XFA value past the effect cap leaves the field unchanged

2026-10-22 21:41:50 +00:00

measure

Merge main into fix/coderabbit-c5-forms-misc

2026-10-22 22:07:19 -04:00

model

docs(filters, model): record the filter chain and inherited copy limits

2026-10-22 17:47:29 +00:00

ocr

fix(ocr): the text layer restores the rendering mode it sets (#3029) (#3033)

2026-10-18 03:12:37 -04:00

optimize

Image resolution walk charges each form entry to the page's form allowance

2026-10-22 19:46:11 +00:00

oracle

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

organize

Merge #4114 (fix/coderabbit-b-shared): shared DecodeBudget

2026-10-22 21:17:55 +00:00

platform

fix(platform): a saved file keeps its group along with its mode

2026-10-22 13:18:26 -04:00

preflight

Merge main into fix/coderabbit-c5-forms-misc

2026-10-22 22:07:19 -04:00

print

Merge pull request #4151 from aiongg/fix/coderabbit-c2-edit-organize

2026-10-22 21:57:13 -04:00

redact

fix(redact): apply redactions on a copy so a failure leaves the document as it was

2026-10-22 23:40:55 +00:00

render

Merge pull request #4117 from aiongg/fix/coderabbit-b-caps

2026-10-22 21:38:59 -04:00

sign

Merge main into fix/coderabbit-c5-forms-misc

2026-10-22 22:07:19 -04:00

testkit

Never-crash gate on the oracle and testkit crates; oracle find() no longer panics on an empty needle (#3435)

2026-10-19 13:01:03 -04:00

ui-egui

M14: recover existing macOS PDF associations after open and save (#3558)

2026-10-22 15:49:13 -06:00

xfa

Merge pull request #4121 from aiongg/fix/coderabbit-c1-js-xfa

2026-10-22 21:39:08 -04:00

xfdf

fix(xfdf): read an indirect /F when deciding a comment is locked against import

2026-10-22 18:02:33 +00:00