Commit Graph
1084 Commits
Author SHA1 Message Date
Adrien BoulléandClaude Opus 5.5 d86de593ca fix(validate-signature): detect signature dictionaries without /Type
/Type is optional in a signature dictionary (PDF 32000-1, 12.8.1) and some
signers leave it out, so those documents still reported "No Signatures
Found". A dictionary without /Type that carries both /ByteRange and
/Contents is now read as a signature; document timestamps
(/Type /DocTimeStamp, /SubFilter /ETSI.RFC3161) stay out because they hold
an RFC 3161 token, not a CMS signature over the document.

Also covers a /Contents placeholder of 74,506 hex characters, the largest
seen in real signed documents, which the former fixed scan window dropped.

Fixes #831

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-19 12:27:34 +02:00
alam00000 9aae81e73c Release v2.8.10 v2.8.10 2026-10-19 15:33:11 +05:30
Alam 2f868d4d0e Merge pull request #932 from alam00000/chore/update-pdf-engine
build(deps): bump PDF engine and viewer to 051abe5b72a9
2026-10-19 15:25:18 +05:30
alam00000 2be3d6858c build(deps): bump PDF engine and viewer to 051abe5b72a9 2026-10-19 09:46:51 +00:00
alam00000 edd959f345 fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI 2026-10-19 14:45:00 +05:30
alam00000 b0a186839a fix: change CLA signature storage branch to 'cla-signatures' 2026-10-19 13:20:31 +05:30
alam00000 70dc47d25c feat: update GitHub Actions workflow for PDF engine and viewer 2026-10-19 13:17:07 +05:30
alam00000 231c012e99 fix(ci): avoid rate limits 2026-10-19 02:07:51 +05:30
Alam 6a75673cbe Merge pull request #927 from alam00000/dependabot/npm_and_yarn/source-map-js-1.2.2
build(deps): bump source-map-js from 1.2.1 to 1.2.2
2026-10-19 02:03:10 +05:30
Alam 66f3628811 Merge pull request #926 from alam00000/dependabot/npm_and_yarn/handlebars-4.7.10
build(deps-dev): bump handlebars from 4.7.9 to 4.7.10
2026-10-19 02:02:59 +05:30
alam00000 4c314b8a13 Update service worker cache version 2026-10-19 01:07:55 +05:30
alam00000 0584def180 Release v2.8.9 v2.8.9 2026-10-19 00:52:15 +05:30
github-actions[bot] ccdb4dd8e5 @cosark has signed the CLA in alam00000/bentopdf#904 2026-10-18 05:25:07 +00:00
dependabot[bot] 733c4f0bf9 build(deps): bump source-map-js from 1.2.1 to 1.2.2
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-17 21:02:32 +00:00
dependabot[bot] dde07a28bd build(deps-dev): bump handlebars from 4.7.9 to 4.7.10
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.9 to 4.7.10.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md)
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-17 12:24:15 +00:00
github-actions[bot] 6ce0d69ba5 @oa-cmu has signed the CLA in alam00000/bentopdf#921 2026-10-17 02:57:30 +00:00
github-actions[bot] 167b7e8f90 @kelseyjmw has signed the CLA in alam00000/bentopdf#919 2026-10-16 16:22:48 +00:00
github-actions[bot] b5a69f9191 @sadfun has signed the CLA in alam00000/bentopdf#917 2026-10-15 12:08:26 +00:00
github-actions[bot] 2651471a84 @sergitost10 has signed the CLA in alam00000/bentopdf#916 2026-10-15 08:06:09 +00:00
github-actions[bot] 872a32929e @anishgowda21 has signed the CLA in alam00000/bentopdf#914 2026-10-14 06:42:53 +00:00
alam00000 46bf0fbb57 Enforce file origin check in annotation PDF viewer 2026-10-13 14:12:12 +05:30
alam00000 3a5f146d1b fix(vercel): docs CSP 2026-10-03 14:17:55 +05:30
alam00000 1a41545fff fixed routing 2026-10-03 14:10:46 +05:30
alam00000 c10511203e added Vercel OSS Program badge 2026-10-01 00:24:47 +05:30
alam00000 4d1dc2a838 fix(vercel): update docs rewrite 2026-09-30 23:58:12 +05:30
alam00000 4874f1e8a7 chore(vercel): add Vercel deployment configuration 2026-09-30 23:49:58 +05:30
github-actions[bot] 2560a31cdd @Harrunos has signed the CLA in alam00000/bentopdf#895 2026-09-26 22:39:25 +00:00
alam00000 daae736907 fix(i18n): add Polish (pl) language support to routing and sitemap generation 2026-09-22 18:26:27 +05:30
github-actions[bot] 044b2eae99 @adrienboulle has signed the CLA in alam00000/bentopdf#887 2026-09-21 11:42:54 +00:00
Alam ea3f42db84 Merge pull request #869 from carminezac/fix/timestamp-default-cors-proxy
fix(timestamp): fall back to the default CORS proxy on official domains
2026-09-21 13:52:45 +05:30
Alam 72d20bba09 Merge pull request #880 from alam00000/chore/update-pdf-engine
build(deps): bump PDF engine and viewer to 813903c93c75
2026-09-17 15:17:21 +05:30
alam00000 5a7927572f feat: add fallback font loading and handling for various languages 2026-09-17 13:56:16 +05:30
alam00000 866d40edc8 build(deps): bump PDF engine and viewer to 813903c93c75 2026-09-17 04:40:44 +00:00
github-actions[bot] 9ae5c93886 @Ahson-Shaikh has signed the CLA in alam00000/bentopdf#870 2026-09-16 11:37:48 +00:00
Alam a44ad4d7d3 Merge pull request #761 from nine-dev9/polish-translation
Add Polish translation
2026-09-16 03:24:27 +05:30
Alam 4c4701ef37 Merge pull request #849 from pavel-miniutka/be-locale
fix(i18n): Belarusian translation fixes
2026-09-16 03:23:09 +05:30
Alam fe65e9e999 Merge pull request #859 from alam00000/dependabot/npm_and_yarn/fflate-0.8.3
build(deps): bump fflate from 0.8.2 to 0.8.3
2026-09-16 03:22:38 +05:30
Alam ff6a09ae72 Merge pull request #871 from Stephan-P/patch-1
Update common.json (Dutch)
2026-09-16 03:22:02 +05:30
Stephan Paternotte 81929c7f5e Update common.json (Dutch)
Home -> Startpagina (= Start Page)
2026-09-14 21:20:04 +02:00
github-actions[bot] 2d37ac9f77 @carminezac has signed the CLA in alam00000/bentopdf#869 2026-09-13 21:29:59 +00:00
Carmine Zacchia 3aefd7bb06 fix(timestamp): fall back to the default CORS proxy on official domains
The timestamp tool requires a CORS proxy: none of the built-in TSA endpoints send Access-Control-Allow-Origin, so the browser blocks the RFC 3161 POST. The runtime only used a proxy when VITE_CORS_PROXY_URL was set, and the official build never set it, leaving timestamping broken on www.bentopdf.com and on the published Docker images.

Fall back to the project-operated proxy on the official domains only (bentopdf.com, www.bentopdf.com), matching the origin already allowed in the generated CSP. Self-hosted instances keep requiring their own proxy.
2026-09-13 23:18:59 +02:00
alam00000 c5ec840d10 feat: add testimonial with real users 2026-09-14 02:37:46 +05:30
alam00000 597e36904e feat: add URL redirection rules 2026-09-10 13:43:15 +05:30
github-actions[bot] e01f80867b @franklioxygen has signed the CLA in alam00000/bentopdf#865 2026-09-08 19:55:41 +00:00
alam00000 d69566ebef fix footer issue 2026-09-05 12:55:31 +05:30
alam00000 d931a71589 feat: add FAQ modal in PDF Multi Tool and Workflow pages 2026-09-05 11:43:12 +05:30
alam00000 2117d70837 prettier fix 2026-09-04 16:43:06 +05:30
alam00000 9e980cdea2 seo fixes 2026-09-04 16:26:08 +05:30
dependabot[bot] 31f6f977f9 build(deps): bump fflate from 0.8.2 to 0.8.3
Bumps [fflate](https://github.com/101arrowz/fflate) from 0.8.2 to 0.8.3.
- [Release notes](https://github.com/101arrowz/fflate/releases)
- [Changelog](https://github.com/101arrowz/fflate/blob/master/CHANGELOG.md)
- [Commits](https://github.com/101arrowz/fflate/compare/v0.8.2...v0.8.3)

---
updated-dependencies:
- dependency-name: fflate
  dependency-version: 0.8.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-09-03 21:34:04 +00:00
github-actions[bot] 83ff47db9b @ynlamy has signed the CLA in alam00000/bentopdf#757 2026-09-03 12:19:43 +00:00