a3d9ce19e6
Implement TH-07 security test validating that PDF password ingress channels properly prevent password disclosure via process arg list. Test cases: - --password VALUE rejected with exit 64 without opt-in - --password VALUE with PDFTRACT_INSECURE_CLI_PASSWORD=1 proceeds with warning - --password-stdin works correctly - PDFTRACT_PASSWORD env var works correctly - Password leaks in /proc/<pid>/cmdline under opt-in (proving the vulnerability) - Password does NOT leak with --password-stdin or env var Closes: pdftract-43jxa |
||
|---|---|---|
| .. | ||
| conformance.rs | ||
| memory_guard.rs | ||
| memory_guard_tests.rs | ||
| ocr_integration.rs | ||
| page_classification.rs | ||
| struct_tree_coverage.rs | ||
| test_xref_debug.rs | ||
| TH-03-mcp-no-auth.rs | ||
| TH-07-ps-leak.rs | ||
| th_05_ssrf_block.rs | ||
| xref_helpers.rs | ||
| xref_integration_test.rs | ||