ansible/flaskpaste
1
0
Fork 0
forked from claw/flaskpaste
Code Pull Requests Activity

docs: update MIME testing results (26 signatures tested)

Browse Source
This commit is contained in:
Username
2025-12-25 23:37:05 +01:00
parent 645f6feefd
commit 4823ff7b5d
1 changed files with 34 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

68
documentation/security-testing-status.md
View File

@@ -43,42 +43,42 @@ Tracking security testing progress and remaining tasks.
### MIME Detection - Additional Formats ### MIME Detection - Additional Formats
33 signatures untested on production: Tested on production (2025-12-25):
``` ```
[ ] WebP (image/webp) [x] WebP (image/webp) PASS
[ ] TIFF (image/tiff) [x] TIFF-LE (image/tiff) PASS
[ ] BMP (image/bmp) [x] TIFF-BE (image/tiff) PASS
[ ] ICO (image/x-icon) [x] BMP (image/bmp) PASS
[ ] AVIF (image/avif) [x] ICO (image/x-icon) PASS
[ ] HEIC (image/heic) [x] WebM (video/webm) PASS
[ ] WebM (video/webm) [x] MP4 (video/mp4) PASS
[ ] MP4 (video/mp4) [x] MP3 (audio/mpeg) PASS
[ ] AVI (video/x-msvideo) [x] MP3-ID3 (audio/mpeg) PASS
[ ] MOV (video/quicktime) [x] FLAC (audio/flac) PASS
[ ] MKV (video/x-matroska) [x] OGG (audio/ogg) PASS
[ ] MP3 (audio/mpeg) [x] 7z (application/x-7z-compressed) PASS
[ ] WAV (audio/wav) [x] RAR (application/vnd.rar) PASS
[ ] FLAC (audio/flac) [x] XZ (application/x-xz) PASS
[ ] OGG (audio/ogg) [x] BZ2 (application/x-bzip2) PASS
[ ] WASM (application/wasm) [x] WASM (application/wasm) PASS
[ ] 7z (application/x-7z-compressed) [x] MachO-32 (application/x-mach-binary) PASS
[ ] RAR (application/vnd.rar) [x] MachO-64 (application/x-mach-binary) PASS
[ ] TAR (application/x-tar)
[ ] XZ (application/x-xz) Fallback to text/plain (safe default):
[ ] BZ2 (application/x-bzip2) [~] AVI - RIFF container, only WEBP subtype checked
[ ] DMG (application/x-apple-diskimage) [~] MOV - ftyp offset varies
[ ] ISO (application/x-iso9660-image) [~] WAV - RIFF container, only WEBP subtype checked
[ ] DEB (application/vnd.debian.binary-package) [~] CAB - Signature not implemented
[ ] RPM (application/x-rpm) [~] DEB - Signature not implemented
[ ] CAB (application/vnd.ms-cab-compressed) [~] AR - Signature not implemented
[ ] DOCX (application/vnd.openxmlformats...)
[ ] XLSX (application/vnd.openxmlformats...) Known issues:
[ ] PPTX (application/vnd.openxmlformats...) [!] RPM - Signature missing (0xEDABEEDB)
[ ] ODF (application/vnd.oasis.opendocument...) [!] JavaClass - Detected as Mach-O (0xCAFEBABE collision)
[ ] Java class (application/java-vm)
[ ] Mach-O (application/x-mach-binary) Not tested (no signature defined):
[ ] AR archive (application/x-archive) [ ] AVIF, HEIC, MKV, TAR, DMG, ISO, DOCX/XLSX/PPTX, ODF
``` ```
### Fuzzing Improvements ### Fuzzing Improvements