Project
Secure document conversion
Secure untrusted document conversion with extension, MIME, OOXML, file-size, and decompression validation, isolated execution, and private vulnerability reporting.
Input handling
Validate extensions, MIME types, and OOXML structure. Apply size and decompression limits before processing untrusted documents.
Report a vulnerability
Use the private reporting process described in SECURITY.md. Do not disclose sensitive document samples in public issues.