diff --git a/docs/_headers b/docs/_headers new file mode 100644 index 0000000..e285888 --- /dev/null +++ b/docs/_headers @@ -0,0 +1,16 @@ +# Security headers for the PDFApps website. +# +# Format: Cloudflare Pages "_headers" file. If this site is ever moved +# back to plain GitHub Pages (no Cloudflare in front), these headers +# must instead be set via Cloudflare Transform Rules, a Cloudflare +# Worker, or the hosting provider's equivalent - _headers is ignored +# by GitHub Pages directly. + +/* + Strict-Transport-Security: max-age=63072000; includeSubDomains; preload + Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://img.shields.io; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' + X-Frame-Options: DENY + X-Content-Type-Options: nosniff + Referrer-Policy: strict-origin-when-cross-origin + Permissions-Policy: geolocation=(), microphone=(), camera=(), payment=(), usb=() + X-Permitted-Cross-Domain-Policies: none diff --git a/docs/changelog.html b/docs/changelog.html index 10e2c87..5ff3f2c 100644 --- a/docs/changelog.html +++ b/docs/changelog.html @@ -3,17 +3,17 @@ - Changelog — PDFApps + Changelog - PDFApps - + - + @@ -26,7 +26,7 @@ - +
@@ -65,17 +65,99 @@

Changelog

+
+
+ v1.13.16 + June 21, 2026 + Latest +
+

Editor audit fixes, atomic saves, and streaming OCR

+
    +
  • Editor: 13 audit fixes including encryption preservation on save (critical), delete_annot persistence, and signature key files written with mode 0o600.
    • +
  • Viewer: saveIncr now uses an atomic backup with restore-on-error (critical), notes are deleted with a bbox tiebreaker, and the Recents UI auto-refreshes after changes.
    • +
  • Performance: streaming OCR writer lowers peak memory, and an explicit overlay pixmap cache reduces redraw cost.
    • +
  • Conversions: PDF to DOCX is now layout-aware, with card rasterization and table reconstruction.
    • +
  • Reliability: 8 critical fixes, 19 HIGH fixes, and atomic writes added across 9 tools.
    • +
  • Translations: 12 new i18n keys covering the encrypt, forms, signature, and note flows.
    • +
  • Dependencies: pypdf 6.13.3, cryptography 49.0.0, lxml 6.1.1, beautifulsoup4 4.15.0, pyinstaller 6.21.0.
    • +
  • Security: 5 transitive CVEs closed.
    • +
  • Installer: fixed a NameError on the error path that was hiding real install errors.
    • +
+
+ +
+
+ v1.13.15 + June 14, 2026 +
+

MSIX file icons and Snap Store unfreeze

+
    +
  • MSIX file icons: generated resources.pri so Explorer resolves the targetsize variants and shows the proper PDF icon for associated files.
    • +
  • Snap version bump: permanent fix that unfroze the Snap Store publication pipeline.
    • +
  • Microsoft Store listing CSV: helper script that generates the localized listings spreadsheet from one source of truth.
    • +
  • Polish: 10 low-severity audit fixes (excepthook, NFC password normalisation, config backup, and more).
    • +
+
+ +
+
+ v1.13.14 + June 7, 2026 +
+

lxml XXE patch and round 4 updater fixes

+
    +
  • lxml CVE PYSEC-2026-87: patched the XXE issue triggered when importing DOCX, PPTX, or EPUB content.
    • +
  • Updater (round 4): cancel reliability, signal lifecycle, and per-stage timeouts.
    • +
+
+ +
+
+ v1.13.13 + May 31, 2026 +
+

Audit round 3 polish

+
    +
  • Presentation: faster rendering path with fewer redundant repaints.
    • +
  • OCR: correct RGBA handling on transparent source pages.
    • +
  • Theme: leftover hard-coded colors now respect the active theme.
    • +
+
+ +
+
+ v1.13.12 + May 24, 2026 +
+

macOS DMG fix and background task migration

+
    +
  • macOS DMG: hdiutil now uses -size 1g, restoring reliable DMG creation in CI.
    • +
  • Background tasks: compress, OCR, convert (8 targets), and watermark migrated to the shared TaskRunner for cancellable, progress-reporting work.
    • +
+
+ +
+
+ v1.13.11 + May 17, 2026 +
+

PyInstaller relaunch fix and Microsoft Store submission

+
    +
  • PyInstaller relaunch: sanitise _PYI_* environment variables together and sweep _MEIPASS* on language change, preventing stale temp-folder handoff on --onefile Windows builds.
    • +
  • Microsoft Store: v1.13.11 submitted as the first iteration after the initial Store launch.
    • +
+
+
v1.13.10 May 8, 2026 - Latest

Microsoft Store launch & language-change fix

    -
  • Microsoft Store launch — PDFApps is now live on the Microsoft Store as a signed MSIX package, available in 8 interface languages (English, Portuguese, Spanish, French, German, Italian, Dutch, Chinese).
    • -
  • Language-change crash fix — switching language no longer triggers an Errno 2 crash on PyInstaller --onefile Windows builds. Root cause: PyInstaller 6.x uses _PYI_APPLICATION_HOME_DIR (not the legacy _MEIPASS2) for the parent→child temp-folder handoff; the relaunch was inheriting a stale value pointing at a folder the parent was about to delete. Fixed by sanitising the QProcessEnvironment before QProcess.startDetached.
    • -
  • Privacy policy page — added pdf-apps.com/privacy.html documenting the offline-only data posture (required for Store submissions declaring runFullTrust).
    • +
  • Microsoft Store launch - PDFApps is now live on the Microsoft Store as a signed MSIX package, available in 8 interface languages (English, Portuguese, Spanish, French, German, Italian, Dutch, Chinese).
    • +
  • Language-change crash fix - switching language no longer triggers an Errno 2 crash on PyInstaller --onefile Windows builds. Root cause: PyInstaller 6.x uses _PYI_APPLICATION_HOME_DIR (not the legacy _MEIPASS2) for the parent→child temp-folder handoff; the relaunch was inheriting a stale value pointing at a folder the parent was about to delete. Fixed by sanitising the QProcessEnvironment before QProcess.startDetached.
    • +
  • Privacy policy page - added pdf-apps.com/privacy.html documenting the offline-only data posture (required for Store submissions declaring runFullTrust).
@@ -86,14 +168,14 @@

Microsoft Store launch & language-change fix

Security audit, installer splash, and macOS DMG

    -
  • macOS .app bundle in a .dmg — replaces the bare Unix binary zip. Mount, drag to Applications, done.
    • -
  • Skip update check on system-managed installs — AUR, Snap, Flatpak, apt, and rpm installs are now updated via the package manager instead of the in-app updater.
    • -
  • Security hardening — SHA256 checksum validation on update downloads, stricter ZIP/TAR extraction with symlink rejection, atomic config file writes, and 100k page limit in parse_pages.
    • -
  • 9 bug fixes across tools — merge validates files exist, watermark guards empty PDFs, encrypt allows empty user password, OCR handles missing language packs, convert shows progress dialog, reorder no longer leaks file handles.
    • -
  • Translated installer splash — two-stage splash (static logo during extraction + animated "Loading…" text in the user's language).
    • -
  • pypdf bumped to 6.10.2 — multiple security patches (XMP metadata RAM exhaustion, FlateDecode limits, xref stream limits).
    • +
  • macOS .app bundle in a .dmg - replaces the bare Unix binary zip. Mount, drag to Applications, done.
    • +
  • Skip update check on system-managed installs - AUR, Snap, Flatpak, apt, and rpm installs are now updated via the package manager instead of the in-app updater.
    • +
  • Security hardening - SHA256 checksum validation on update downloads, stricter ZIP/TAR extraction with symlink rejection, atomic config file writes, and 100k page limit in parse_pages.
    • +
  • 9 bug fixes across tools - merge validates files exist, watermark guards empty PDFs, encrypt allows empty user password, OCR handles missing language packs, convert shows progress dialog, reorder no longer leaks file handles.
    • +
  • Translated installer splash - two-stage splash (static logo during extraction + animated "Loading…" text in the user's language).
    • +
  • pypdf bumped to 6.10.2 - multiple security patches (XMP metadata RAM exhaustion, FlateDecode limits, xref stream limits).
  • Updater title and error messages translated in 8 languages. Animated dots (.../../...) while downloading and applying.
    • -
  • Download thread cleanup — cancelling the update dialog mid-download no longer leaks QThreads.
    • +
  • Download thread cleanup - cancelling the update dialog mid-download no longer leaks QThreads.
@@ -104,10 +186,10 @@

Security audit, installer splash, and macOS DMG

5 import formats and 4 export formats

@@ -118,9 +200,9 @@

5 import formats and 4 export formats

Bookmarks, night mode, and release notes in updater

@@ -146,7 +228,7 @@

Theme-aware dialogs and security hardening

Digital signature and continuous scroll editor