origamindee 3.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 593f3f22174161d77e20e75ff2a7a9ae577662861a59881073f78f2c51ac89df
+  data.tar.gz: fe531fa4cc790be0639dcc9703c782bb4f64d9f38ff29a468950fbc131369e52
+SHA512:
+  metadata.gz: 92eb2ab3d99b12da581091ecc5958ac21e3a692294d1c41cca586aa38be18f9d0c91a667cdaeee40be40cd3bd8f593747b03bf6528c675d9dd5df91fa671a4b0
+  data.tar.gz: 9aef422a383150380c49a548429d48cd34905982fae8ef1a0a88f782e5103f5d95944f0c22b037ea2c9781575314f73e84a0f6a780b1164047806a79177cba9d

data/CHANGELOG.md

@@ -0,0 +1,89 @@
+3.0.0
+-----
+* Replaced Colorize with Rainbow for LGPL compatibility
+* Default PDF encryption is now AES-256
+* Fixes for Ruby 3.0 and 3.1
+* Updated dependencies
+* Includes all work done by **Guillaume Delugré** done after 2.1.0:
+  * **Many, many fixes!**
+  * bin/pdfmetadata: switch to output to JSON
+  * header: added Header#version
+  * signature: support for adbe.x509.rsa_sha1
+  * signature: new options introduced for PDF#verify
+  * pdf: method PDF#loaded?
+  * Image with height support
+  * object: remove operator <=>
+  * page: use lazy page enumerator for get_page
+  * test: added test cases to test_pdf_parse
+  * parser: parse methods now accept a String argument
+
+2.1.0
+-----
+* Moved pdfwalker to a separate gem
+
+2.0.0
+-----
+* Code reindented to 4 spaces.
+* Code base refactored for Ruby 2.x (requires at least 2.1).
+* Support for Crypt filters.
+* The parser now supports a lazy mode.
+* Fixed all Ruby warnings.
+* Better type propagation.
+* Use namespace refinements to protect the standard namespace.
+* PDF#each_* methods can return Enumerators.
+* Use the colorize gem for console output.
+* Faster loading of objects in pdfwalker.
+* Better handling of cross-references in pdfwalker.
+* Many bug fixes.
+
+1.2.0 (2011-09-29)
+-----
+* Support for JavaScript emulation based on V8 (requires therubyracer gem).
+
+1.1.0 (2011-09-14)
+-----
+* Support for standard security handler revision 6.
+
+1.0.2 (2011-05-25)
+-----
+* Added a Rakefile to run unit tests, build rdoc and build gem.
+* Added a Ruby shell for Origami.
+* Added a bin folder, with some useful command-line tools.
+* Can now be installed as a RubyGem.
+* AESV3 support (AES256 encryption/decryption).
+* Encryption/decryption can be achieved with or without openssl.
+* Changed PDF#encrypt prototype.
+* Support for G3 unidimensional encoding/decoding of CCITTFax filter.
+* Support for TIFF stream predictor functions.
+* Name trees lookup methods.
+* Renamed PDF#saveas to PDF#save.
+* Lot of bug fixes.
+
+beta3 (2010-08-26)
+-----
+* Faster decryption process.
+* Properly parse objects with no endobj token.
+* Image viewer in pdfwalker.
+
+beta2 (2010-04-01)
+-----
+* Support for Flash/RichMedia integration.
+* XFA forms.
+* Search feature for pdfwalker.
+* Fixed various bugs.
+
+beta1 (2009-09-15)
+-----
+* Basic support for graphics drawing as lines, colors, shading, shapes...
+* Support for numerical functions.
+* Support for date strings.
+* Added PDF#insert_page(index, page) method.
+* Added a forms widgets template.
+* Ability to delinearize documents.
+* Fixed various bugs.
+
+beta0 (2009-07-06)
+-----
+* Support for XRef streams. 
+* Support for Object streams creation. 
+* Support for PNG stream predictor functions.

data/COPYING.LESSER

@@ -0,0 +1,165 @@
+		   GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions.
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version.
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

data/README.md

@@ -0,0 +1,131 @@
+[![License: LGPL](https://img.shields.io/github/license/mindee/origamindee)](https://www.gnu.org/licenses/lgpl-3.0)
+[![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/mindee/origamindee/test.yml)](https://github.com/mindee/origamindee)
+[![Gem Version](https://img.shields.io/gem/v/origamindee)](https://rubygems.org/gems/origamindee)
+[![Downloads](https://img.shields.io/gem/dt/origamindee.svg)](https://rubygems.org/gems/origamindee)
+
+Origamindee
+===========
+[Mindee](https://mindee.com/)'s fork of the popular Origami library.
+
+Overview
+--------
+Origami is a framework written in pure Ruby to manipulate PDF files.
+
+It offers the possibility to parse the PDF contents, modify and save the PDF
+structure, as well as creating new documents.
+
+Origami supports some advanced features of the PDF specification:
+
+  * Compression filters with predictor functions
+  * Encryption using RC4 (now obsolete) or AES, including the undocumented Revision 6 derivation algorithm
+  * Digital signatures and Usage Rights
+  * File attachments
+  * AcroForm and XFA forms
+  * Object streams
+
+Origami is able to parse PDF, FDF and PPKLite (Adobe certificate store) files.
+
+Requirements
+------------
+The following Ruby versions are tested and supported: 2.6, 2.7, 3.0, 3.1
+
+Some optional features require additional gems:
+
+  * [therubyracer][the-ruby-racer] for JavaScript emulation of PDF scripts
+
+Quick start
+-----------
+First install Origamindee (this fork) using the latest gem available:
+
+    $ gem install origamindee
+
+You'll need to import it under the original name:
+```ruby
+require 'origami'
+```
+
+To process a PDF document, you can use the ``PDF.read`` method:
+
+```ruby
+pdf = Origami::PDF.read "something.pdf"
+
+puts "This document has #{pdf.pages.size} page(s)"
+```
+
+The default behavior is to parse the entire contents of the document at once.
+This can be changed by passing the ``lazy`` flag to parse objects on demand.
+
+```ruby
+pdf = Origami::PDF.read "something.pdf", lazy: true
+
+pdf.each_page do |page|
+    page.each_font do |name, font|
+        # ... only parse the necessary bits
+    end
+end
+```
+
+You can also create documents directly by instantiating a new PDF object:
+
+```ruby
+pdf = Origami::PDF.new
+
+pdf.append_page
+pdf.pages.first.write "Hello", size: 30
+
+pdf.save("example.pdf")
+
+# Another way of doing it
+Origami::PDF.write("example.pdf") do |pdf|
+    pdf.append_page do |page|
+        page.write "Hello", size: 30
+    end
+end
+```
+
+Take a look at the [examples](examples) and [bin](bin) directories for some examples of advanced usage.
+
+Tools
+-----
+Origami comes with a set of tools to manipulate PDF documents from the command line.
+
+  * [pdfcop](bin/pdfcop): Runs some heuristic checks to detect dangerous contents.
+  * [pdfdecompress](bin/pdfdecompress): Strips compression filters out of a document.
+  * [pdfdecrypt](bin/pdfdecrypt): Removes encrypted contents from a document.
+  * [pdfencrypt](bin/pdfencrypt): Encrypts a PDF document.
+  * [pdfexplode](bin/pdfexplode): Explodes a document into several documents, each of them having one deleted resource. 
+                                  Useful for reduction of crash cases after a fuzzing session.
+  * [pdfextract](bin/pdfextract): Extracts binary resources of a document (images, scripts, fonts, etc.).
+  * [pdfmetadata](bin/pdfmetadata): Displays the metadata contained in a document.
+  * [pdf2ruby](bin/pdf2ruby): Converts a PDF into an Origami script rebuilding an equivalent document (experimental).
+  * [pdfsh](bin/pdfsh): An IRB shell running inside the Origami namespace.
+
+**Note**: Since version 2.1, [pdfwalker][pdfwalker-gem] has been moved to a [separate repository][pdfwalker-repo].
+
+Motivation
+----------
+We were using the excellent Origami library for our [Ruby OCR client library](https://github.com/mindee/mindee-api-ruby).
+
+Unfortunately, it seems the Origami project is now inactive, and as we needed to add Ruby 3.0 support, the decision was made
+to fork Origami.
+
+We also noticed that the `colorize` library is licensed under GPL, meaning that Origami cannot be licensed under the LGPL.  
+It was therefore replaced by `Rainbow` which has similar functionality, and is licensed under MIT.
+
+Furthermore, we are now in a better position to fix any problems related to PDF parsing that are encountered by our users. 
+
+As such it is our intention to support functionalities within the scope of our client library.
+
+**We do not claim to be an official successor to Origami.**
+
+License
+-------
+Origami is distributed under the [LGPL](COPYING.LESSER) license.
+
+Copyright © 2019 Guillaume Delugré
+
+Copyright © 2022 Mindee, SA
+
+[the-ruby-racer]: https://rubygems.org/gems/therubyracer
+[pdfwalker-gem]: https://rubygems.org/gems/pdfwalker
+[pdfwalker-repo]: https://github.com/gdelugre/pdfwalker

data/bin/config/pdfcop.conf.yml

@@ -0,0 +1,236 @@
+---
+POLICY_NONE:
+
+    #
+    # General features.
+    #
+    allowParserErrors: true
+    allowAttachments: true
+    allowEncryption: true
+    allowFormCalc: true
+    allowJSAtOpening: true
+    allowJS: true
+    allowAcroForms: true
+    allowXFAForms: true
+
+    #
+    # Page annotations.
+    #
+    allowAnnotations: true
+    allow3DAnnotation: true
+    allowFileAttachmentAnnotation: true
+    allowMovieAnnotation: true
+    allowRichMediaAnnotation: true
+    allowScreenAnnotation: true
+    allowSoundAnnotation: true
+
+    #
+    # PDF Actions.
+    #
+    allowChainedActions: true
+    allowOpenAction: true
+    allowGoTo3DAction: true
+    allowGoToAction: true
+    allowGoToEAction: true
+    allowGoToRAction: true
+    allowImportDataAction: true
+    allowJSAction: true
+    allowLaunchAction: true
+    allowMovieAction: true
+    allowNamedAction: true
+    allowRenditionAction: true
+    allowRichMediaAction: true
+    allowSoundAction: true
+    allowSubmitFormAction: true
+    allowURIAction: true
+
+    #
+    # Stream filters.
+    #
+    allowASCII85Filter: true
+    allowASCIIHexFilter: true
+    allowCCITTFaxFilter: true
+    allowCryptFilter: true
+    allowDCTFilter: true
+    allowFlateFilter: true
+    allowJBIG2Filter: true
+    allowJPXFilter: true
+    allowLZWFilter: true
+    allowRunLengthFilter: true
+
+POLICY_STANDARD:
+
+    #
+    # General features.
+    #
+    allowParserErrors: false
+    allowAttachments: false
+    allowAcroForms: true
+    allowEncryption: true
+    allowFormCalc: true
+    allowJS: true
+    allowJSAtOpening: false
+    allowXFAForms: true
+
+    #
+    # Page annotations.
+    #
+    allowAnnotations: true
+    allow3DAnnotation: false
+    allowFileAttachmentAnnotation: false
+    allowMovieAnnotation: false
+    allowRichMediaAnnotation: false
+    allowScreenAnnotation: false
+    allowSoundAnnotation: false
+
+    #
+    # PDF Actions.
+    #
+    allowChainedActions: true
+    allowOpenAction: true
+    allowGoTo3DAction: false
+    allowGoToAction: true
+    allowGoToEAction: false
+    allowGoToRAction: false
+    allowImportDataAction: false
+    allowJSAction: true
+    allowLaunchAction: false
+    allowMovieAction: false
+    allowNamedAction: false
+    allowRenditionAction: false
+    allowRichMediaAction: false
+    allowSoundAction: false
+    allowSubmitFormAction: true
+    allowURIAction: true
+
+    #
+    # Stream filters.
+    #
+    allowASCII85Filter: false
+    allowASCIIHexFilter: false
+    allowCCITTFaxFilter: true
+    allowCryptFilter: true
+    allowDCTFilter: true
+    allowFlateFilter: true
+    allowJBIG2Filter: false
+    allowJPXFilter: false
+    allowLZWFilter: false
+    allowRunLengthFilter: false
+
+POLICY_STRONG:
+
+    #
+    # General features.
+    #
+    allowParserErrors: false
+    allowAttachments: false
+    allowAcroForms: false
+    allowEncryption: true
+    allowFormCalc: true
+    allowJS: false
+    allowJSAtOpening: false
+    allowXFAForms: false
+
+    #
+    # Page annotations.
+    #
+    allowAnnotations: true
+    allow3DAnnotation: false
+    allowFileAttachmentAnnotation: false
+    allowMovieAnnotation: false
+    allowRichMediaAnnotation: false
+    allowScreenAnnotation: false
+    allowSoundAnnotation: false
+
+    #
+    # PDF Actions.
+    #
+    allowChainedActions: false
+    allowOpenAction: true
+    allowGoTo3DAction: false
+    allowGoToAction: true
+    allowGoToEAction: false
+    allowGoToRAction: false
+    allowImportDataAction: false
+    allowJSAction: false
+    allowLaunchAction: false
+    allowMovieAction: false
+    allowNamedAction: false
+    allowRenditionAction: false
+    allowRichMediaAction: false
+    allowSoundAction: false
+    allowSubmitFormAction: false
+    allowURIAction: true
+
+    #
+    # Stream filters.
+    #
+    allowASCII85Filter: false
+    allowASCIIHexFilter: false
+    allowCCITTFaxFilter: false
+    allowCryptFilter: true
+    allowDCTFilter: true
+    allowFlateFilter: true
+    allowJBIG2Filter: false
+    allowJPXFilter: false
+    allowLZWFilter: false
+    allowRunLengthFilter: false
+
+POLICY_PARANOID:
+
+    #
+    # General features.
+    #
+    allowParserErrors: false
+    allowAttachments: false
+    allowAcroForms: false
+    allowEncryption: false
+    allowFormCalc: false
+    allowJS: false
+    allowJSAtOpening: false
+    allowXFAForms: false
+
+    #
+    # Page annotations.
+    #
+    allowAnnotations: true
+    allow3DAnnotation: false
+    allowFileAttachmentAnnotation: false
+    allowMovieAnnotation: false
+    allowRichMediaAnnotation: false
+    allowScreenAnnotation: false
+    allowSoundAnnotation: false
+
+    #
+    # PDF Actions.
+    #
+    allowChainedActions: false
+    allowOpenAction: false
+    allowGoTo3DAction: false
+    allowGoToAction: true
+    allowGoToEAction: false
+    allowGoToRAction: false
+    allowImportDataAction: false
+    allowJSAction: false
+    allowLaunchAction: false
+    allowMovieAction: false
+    allowNamedAction: false
+    allowRenditionAction: false
+    allowRichMediaAction: false
+    allowSoundAction: false
+    allowSubmitFormAction: false
+    allowURIAction: false
+
+    #
+    # Stream filters.
+    #
+    allowASCII85Filter: false
+    allowASCIIHexFilter: false
+    allowCCITTFaxFilter: false
+    allowCryptFilter: false
+    allowDCTFilter: true
+    allowFlateFilter: true
+    allowJBIG2Filter: false
+    allowJPXFilter: false
+    allowLZWFilter: false
+    allowRunLengthFilter: false