aiongg ae791d667b fix(sign): a time-stamp response must carry the requested nonce and policy ...

parse_response compared only the digest algorithm and imprint with the
query, and the token parser dropped the TSTInfo nonce. A genuine token for
the same imprint from another request or under another policy was
accepted. The token keeps its nonce, and a requested nonce or policy must
match.

2026-10-22 17:57:53 +00:00

..

a11y

Merge r2 track t15: mixed: accessibility-tags, dialogs-prefs, javascript, organize-pages

2026-10-22 02:23:22 +00:00

annot

Merge r2 track t14: signatures

2026-10-22 02:22:02 +00:00

audit

Merge PR #2854: Redaction audit: an opaque filled Square annotation over text is a cover

2026-10-22 01:44:56 +00:00

automation

fix(automation): keep page text from tools when copying is not allowed

2026-10-22 13:18:26 -04:00

compare

…

content

Merge PR #3652: Keep filtered inline images whole when their data contains EI

2026-10-22 01:45:07 +00:00

cos

test(cos): build the private temp directory without an unused mut on Windows

2026-10-22 12:13:16 -04:00

create

fix(create): refuse an indexed colour space whose base is indexed before following it

2026-10-22 13:27:52 -04:00

crypt

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

edit

Integration: subset fallback test names the face the build leads with (#2609 × #1760)

2026-10-22 04:15:17 +00:00

engine

fix(engine): low-resolution printing prints only the chosen content

2026-10-22 13:18:26 -04:00

export

Integration: #2994 put the part() doc comment back above part

2026-10-22 01:45:34 +00:00

filters

M1: preserve output-limit errors in raw Flate fallback

2026-10-14 21:58:05 +02:00

fonts

Integration: cargo fmt

2026-10-22 02:52:29 +00:00

forms

Merge upstream main 88dad98dd into next

2026-10-22 05:22:09 +00:00

geom

…

js

fix(js): refuse code compiled from strings that skipped the script checks

2026-10-22 13:18:26 -04:00

measure

Merge PR #3011: M12: the page side of a measuring scale takes a unit, so 1:50 is 1 mm = 50 mm (#2752)

2026-10-22 01:45:04 +00:00

model

M2: bound page-tree traversal memory for repeated children (#1926)

2026-10-15 02:29:46 -04:00

ocr

fix(ocr): the text layer restores the rendering mode it sets (#3029) (#3033)

2026-10-18 03:12:37 -04:00

optimize

fix(optimize): bound a merged fragment image's height before sizing its buffer

2026-10-22 13:27:52 -04:00

oracle

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

organize

Merge r2 track t16: mixed: automation-mcp, crate:misc, crypt-security, export-convert, optimize, preflight-pdfa, save-io

2026-10-22 02:23:58 +00:00

platform

fix(platform): a saved file keeps its group along with its mode

2026-10-22 13:18:26 -04:00

preflight

fix(preflight): identify PDF standards by XML namespace (#3364)

2026-10-19 02:48:40 -04:00

print

fix(engine): low-resolution printing prints only the chosen content

2026-10-22 13:18:26 -04:00

redact

fix(redact): charge repeated name-tree kids to the node budget

2026-10-22 13:28:40 -04:00

render

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

sign

fix(sign): a time-stamp response must carry the requested nonce and policy

2026-10-22 17:57:53 +00:00

testkit

Never-crash gate on the oracle and testkit crates; oracle find() no longer panics on an empty needle (#3435)

2026-10-19 13:01:03 -04:00

ui-egui

i18n(ui): carry the two new signature wordings in the catalogues that must cover them

2026-10-22 12:13:16 -04:00

xfa

Integration: a non-interactive XFA field is measured at the width it is drawn (#3515 × #3521)

2026-10-22 04:15:17 +00:00

xfdf

fix(xfdf): bound what an FDF import copies out of repeated references

2026-10-22 17:57:53 +00:00