@file-viewer/renderer-ofd 2.1.23 → 2.1.24

package/README.en.md

@@ -35,6 +35,7 @@ const options = {
 ## Features
 
 - Preview `.ofd` documents in the browser.
+- Preview electronic seal appearance (SES seal images and nested OFD seals) using `StampAnnot` boundaries; preview does not perform cryptographic verification.
 - Lazy-load the OFD parser and renderer at the format boundary.
 - Ship the vendor files inside the npm package for offline and intranet deployments.
 - Support unified zoom, print, HTML export, and lifecycle context integration.

package/README.md

@@ -35,6 +35,7 @@ const options = {
 ## 能力
 
 - 支持 `.ofd` 国产版式文件。
+- 支持电子签章外观预览（SES 印章图片与嵌套 OFD 印章），按 `StampAnnot` 边界叠加显示；预览不做国密验签。
 - 按需动态导入 OFD 解析/渲染代码，不污染首屏。
 - vendor 文件随 npm 包发布，支持企业内网和纯离线部署。
 - 支持统一缩放、打印、HTML 导出和生命周期上下文。

package/dist/ofd.js

@@ -10,10 +10,12 @@ const ofdStyle = `
 .ofd-state[hidden]{display:none!important}
 .ofd-state.error{color:#b42318}
 .ofd-page-frame{position:relative;display:block;margin:0 auto 20px;overflow:visible}
-.ofd-page{display:block;margin-left:auto!important;margin-right:auto!important;box-shadow:0 10px 26px rgba(15,23,42,.12);transition:transform .16s ease}
-.file-viewer[data-viewer-theme='dark'] .ofd-viewer{background:#172033;color:#e5eef8}
-.file-viewer[data-viewer-theme='dark'] .ofd-state{background:rgba(15,23,42,.9);color:#cbd5e1}
-@media (prefers-color-scheme:dark){.file-viewer[data-viewer-theme='system'] .ofd-viewer{background:#172033;color:#e5eef8}.file-viewer[data-viewer-theme='system'] .ofd-state{background:rgba(15,23,42,.9);color:#cbd5e1}}
+.ofd-page{display:block;margin-left:auto!important;margin-right:auto!important;background:#fff!important;color:#111827!important;color-scheme:only light;forced-color-adjust:none;isolation:isolate;box-shadow:0 10px 26px rgba(15,23,42,.12);transition:transform .16s ease}
+.ofd-page,.ofd-page *{color-scheme:only light;forced-color-adjust:none}
+.ofd-page svg,.ofd-page canvas,.ofd-page img{filter:none!important;mix-blend-mode:normal!important}
+[data-viewer-theme='dark'] .ofd-viewer{background:#172033;color:#e5eef8}
+[data-viewer-theme='dark'] .ofd-state{background:rgba(15,23,42,.9);color:#cbd5e1}
+@media (prefers-color-scheme:dark){[data-viewer-theme='system'] .ofd-viewer{background:#172033;color:#e5eef8}[data-viewer-theme='system'] .ofd-state{background:rgba(15,23,42,.9);color:#cbd5e1}}
 @media print{.ofd-viewer{background:#fff!important}.ofd-stage{padding:0!important;overflow:visible!important}.ofd-page-frame{break-after:page;page-break-after:always;margin:0 auto!important}.ofd-page-frame:last-child{break-after:auto;page-break-after:auto}.ofd-page{box-shadow:none!important;transition:none!important}}
 `;
 const loadOfdModule = (() => {
@@ -73,6 +75,10 @@ const appendPages = (documentRef, target, pages) => {
         const frame = documentRef.createElement('div');
         frame.className = 'ofd-page-frame';
         page.classList.add('ofd-page');
+        page.dataset.viewerThemeBoundary = 'light';
+        page.style.backgroundColor = '#fff';
+        page.style.color = '#111827';
+        page.style.colorScheme = 'only light';
         frame.appendChild(page);
         fragment.appendChild(frame);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@file-viewer/renderer-ofd",
-  "version": "2.1.23",
+  "version": "2.1.24",
   "private": false,
   "type": "module",
   "description": "Standalone OFD renderer plugin for Flyfish File Viewer powered by DLTech21/ofd.js.",
@@ -53,15 +53,17 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@file-viewer/core": "2.1.23",
+    "@file-viewer/core": "2.1.24",
     "jszip": "^3.10.1"
   },
   "devDependencies": {
+    "linkedom": "^0.18.12",
     "typescript": "^6.0.3"
   },
   "license": "Apache-2.0",
   "scripts": {
     "build": "tsc -b tsconfig.json",
-    "type-check": "tsc -b tsconfig.json"
+    "type-check": "tsc -b tsconfig.json",
+    "verify:github-94": "node scripts/verify-github-94.mjs"
   }
 }

package/vendor/dltech/ofd/ofd_parser.js

@@ -21,6 +21,8 @@
 import JsZip from "jszip";
 import {parseStBox, getExtensionByPath, replaceFirstSlash} from "./ofd_util.js";
 import {Jbig2Image} from '../jbig2/jbig2.js';
+import {pipeline} from "./pipeline.js";
+import {parseSesSignature} from "./ses_signature_parser.js";
 
 const ensureBrowserGlobal = () => {
     // DLTech21/ofd.js 的一部分遗留逻辑读取 Node 风格 global。
@@ -257,6 +259,30 @@ export const parseSingleDoc = async function ([zip, array]) {
     return docs;
 }
 
+const uint8ArrayToBase64 = function (bytes) {
+    const chunkSize = 0x8000;
+    let binary = '';
+    for (let i = 0; i < bytes.length; i += chunkSize) {
+        const chunk = bytes.subarray(i, i + chunkSize);
+        binary += String.fromCharCode.apply(null, chunk);
+    }
+    return btoa(binary);
+}
+
+const sealImageMime = function (type) {
+    const normalized = String(type || '').toLowerCase();
+    if (normalized === 'jpg' || normalized === 'jpeg') {
+        return 'image/jpeg';
+    }
+    if (normalized === 'gif') {
+        return 'image/gif';
+    }
+    if (normalized === 'bmp') {
+        return 'image/bmp';
+    }
+    return 'image/png';
+}
+
 export const doGetDocRoot = async function (zip, docbody) {
     let docRoot = docbody['ofd:DocRoot'];
     docRoot = normalizeZipPath(replaceFirstSlash(docRoot));
@@ -267,18 +293,33 @@ export const doGetDocRoot = async function (zip, docbody) {
     for (const stamp of stampAnnot) {
         if (stamp.sealObj && Object.keys(stamp.sealObj).length > 0) {
             if (stamp.sealObj.type === 'ofd') {
-                const stampObjs = await getSealDocumentObj(stamp);
-                for (let stampObj of stampObjs) {
-                    stamp.stampAnnot.boundary = parseStBox(stamp.stampAnnot['@_Boundary']);
-                    //console.log(stamp.stampAnnot.boundary)
-                    stamp.stampAnnot.pageRef = stamp.stampAnnot['@_PageRef'];
-                    if (!stampAnnotArray[stamp.stampAnnot['@_PageRef']]) {
-                        stampAnnotArray[stamp.stampAnnot['@_PageRef']] = [];
+                try {
+                    const stampObjs = await getSealDocumentObj(stamp);
+                    let annotArray = [];
+                    annotArray = annotArray.concat(stamp.stampAnnot);
+                    for (const annot of annotArray) {
+                        if (!annot) {
+                            continue;
+                        }
+                        annot.boundary = parseStBox(annot['@_Boundary']);
+                        annot.pageRef = annot['@_PageRef'];
+                        for (let stampObj of stampObjs) {
+                            if (!stampAnnotArray[annot['@_PageRef']]) {
+                                stampAnnotArray[annot['@_PageRef']] = [];
+                            }
+                            stampAnnotArray[annot['@_PageRef']].push({
+                                type: 'ofd',
+                                obj: stampObj,
+                                stamp: {...stamp, stampAnnot: annot},
+                            });
+                        }
                     }
-                    stampAnnotArray[stamp.stampAnnot['@_PageRef']].push({type: 'ofd', obj: stampObj, stamp});
+                } catch (e) {
+                    console.warn('[ofd] nested OFD seal parse failed', e);
                 }
-            } else if (stamp.sealObj.type === 'png') {
-                let img = 'data:image/png;base64,' + btoa(String.fromCharCode.apply(null, stamp.sealObj.ofdArray));
+            } else if (stamp.sealObj.ofdArray?.length) {
+                const mime = sealImageMime(stamp.sealObj.type);
+                let img = `data:${mime};base64,` + uint8ArrayToBase64(stamp.sealObj.ofdArray);
                 let stampArray = [];
                 stampArray = stampArray.concat(stamp.stampAnnot);
                 for (const annot of stampArray) {
@@ -523,16 +564,93 @@ const parsePage = async function (zip, obj, doc) {
 }
 
 const getSignature = async function (zip, signatures, doc) {
-    // 签章解析依赖 ASN.1、国密算法和证书校验链路。在线预览先跳过签章校验，
-    // 以免个别签章解析失败阻断正文页渲染；业务如需验签可在服务端独立处理。
-    void zip;
-    void signatures;
-    void doc;
-    return [];
+    // 预览只解析签章外观（SES 印章图片 / 嵌套 OFD），不做国密/证书验签，
+    // 单个签章失败不影响正文页渲染。
+    let stampAnnot = [];
+    if (!signatures) {
+        return stampAnnot;
+    }
+    try {
+        let signaturesPath = normalizeZipPath(replaceFirstSlash(signatures));
+        if (!startsWithZipRoot(signaturesPath, doc)) {
+            signaturesPath = joinZipPath(doc, signaturesPath);
+        }
+        if (!getZipEntry(zip, signaturesPath)) {
+            return stampAnnot;
+        }
+        let data = await getJsonFromXmlContent(zip, signaturesPath);
+        let signature = data['json']['ofd:Signatures']['ofd:Signature'];
+        let signatureArray = [];
+        signatureArray = signatureArray.concat(signature);
+        for (const sign of signatureArray) {
+            if (!sign) {
+                continue;
+            }
+            try {
+                let signatureLoc = normalizeZipPath(replaceFirstSlash(sign['@_BaseLoc']));
+                let signatureID = sign['@_ID'];
+                if (signatureLoc && signatureLoc.indexOf('Signs') === -1 && !startsWithZipRoot(signatureLoc, doc)) {
+                    signatureLoc = joinZipPath('Signs', signatureLoc);
+                }
+                if (!startsWithZipRoot(signatureLoc, doc)) {
+                    signatureLoc = joinZipPath(doc, signatureLoc);
+                }
+                const parsed = await getSignatureData(zip, signatureLoc, signatureID);
+                if (parsed) {
+                    stampAnnot.push(parsed);
+                }
+            } catch (e) {
+                console.warn('[ofd] signature entry parse failed', sign?.['@_ID'], e);
+            }
+        }
+    } catch (e) {
+        console.warn('[ofd] signatures.xml parse failed', e);
+    }
+    return stampAnnot;
 }
 
-const getSealDocumentObj = function () {
-    return Promise.resolve([]);
+const getSignatureData = async function (zip, signature, signatureID) {
+    const data = await getJsonFromXmlContent(zip, signature);
+    let signedValue = data['json']['ofd:Signature']['ofd:SignedValue'];
+    if (signedValue == null) {
+        return null;
+    }
+    signedValue = normalizeZipPath(replaceFirstSlash(String(signedValue)));
+    if (!getZipEntry(zip, signedValue)) {
+        signedValue = joinZipPath(signature.substring(0, signature.lastIndexOf('/')), signedValue);
+    }
+    if (!getZipEntry(zip, signedValue)) {
+        console.warn('[ofd] SignedValue not found', signedValue);
+        return null;
+    }
+    let sealObj = await parseSesSignature(zip, signedValue, getZipEntry);
+    if (!sealObj || !Object.keys(sealObj).length) {
+        return null;
+    }
+    const signedInfoNode = data['json']['ofd:Signature']['ofd:SignedInfo'] || {};
+    return {
+        'stampAnnot': signedInfoNode['ofd:StampAnnot'],
+        'sealObj': sealObj,
+        'signedInfo': {
+            'signatureID': signatureID,
+            'VerifyRet': sealObj.verifyRet,
+            'Provider': signedInfoNode['ofd:Provider'],
+            'SignatureMethod': signedInfoNode['ofd:SignatureMethod'],
+            'SignatureDateTime': signedInfoNode['ofd:SignatureDateTime'],
+        },
+    };
+}
+
+const getSealDocumentObj = function (stampAnnot) {
+    return new Promise((resolve, reject) => {
+        pipeline.call(this, async () => await unzipOfd(stampAnnot.sealObj.ofdArray), getDocRoots, parseSingleDoc)
+            .then(res => {
+                resolve(res)
+            })
+            .catch(res => {
+                reject(res);
+            });
+    });
 }
 
 const getJsonFromXmlContent = async function (zip, xmlName) {

package/vendor/dltech/ofd/ofd_render.js

@@ -208,9 +208,9 @@ const renderSealPage = function (pageDiv, pages, tpls, isStampAnnot, stampAnnot,
         let divBoundary = converterBox(stampAnnotBoundary);
         let div = document.createElement('div');
         div.setAttribute("name","seal_img_div");
-        div.setAttribute('style', `cursor: pointer; position:relative; left: ${divBoundary.x}px; top: ${divBoundary.y}px; width: ${divBoundary.w}px; height: ${divBoundary.h}px`)
-        div.setAttribute('data-ses-signature', `${JSON.stringify(SES_Signature)}`);
-        div.setAttribute('data-signed-info', `${JSON.stringify(signedInfo)}`);
+        div.setAttribute('style', `cursor: pointer; overflow: hidden; position:absolute; left: ${divBoundary.x}px; top: ${divBoundary.y}px; width: ${divBoundary.w}px; height: ${divBoundary.h}px`)
+        div.setAttribute('data-ses-signature', `${JSON.stringify(SES_Signature || {})}`);
+        div.setAttribute('data-signed-info', `${JSON.stringify(signedInfo || {})}`);
         const template = page[pageId]['json']['ofd:Template'];
         if (template) {
             const layers = tpls[template['@_TemplateID']]['json']['ofd:Content']['ofd:Layer'];
@@ -339,8 +339,8 @@ export const renderImageOnDiv = function (pageWidth, pageHeight, imgSrc, boundar
     if(isStampAnnot)
     {
         div.setAttribute("name","seal_img_div");
-        div.setAttribute('data-ses-signature', `${JSON.stringify(SES_Signature)}`);
-        div.setAttribute('data-signed-info', `${JSON.stringify(signedInfo)}`);
+        div.setAttribute('data-ses-signature', `${JSON.stringify(SES_Signature || {})}`);
+        div.setAttribute('data-signed-info', `${JSON.stringify(signedInfo || {})}`);
     }
     let img = document.createElement('img');
     img.src = imgSrc;
@@ -387,7 +387,7 @@ export const renderTextObject = function (fontResObj, textObject, defaultFillCol
             let text = document.createElementNS('http://www.w3.org/2000/svg', 'text');
             text.setAttribute('x', textCodePoint.x);
             text.setAttribute('y', textCodePoint.y);
-            text.innerHTML = textCodePoint.text;
+            text.textContent = textCodePoint.text;
             if (ctm) {
                 const ctms = parseCtm(ctm);
                 text.setAttribute('transform', `matrix(${ctms[0]} ${ctms[1]} ${ctms[2]} ${ctms[3]} ${converterDpi(ctms[4])} ${converterDpi(ctms[5])})`)
@@ -396,10 +396,10 @@ export const renderTextObject = function (fontResObj, textObject, defaultFillCol
                 text.setAttribute('transform', `matrix(${hScale}, 0, 0, 1, ${(1-hScale)*textCodePoint.x}, 0)`)
                 // text.setAttribute('transform-origin', `${textCodePoint.x}`);
             }
-            text.setAttribute('fill', defaultStrokeColor);
-            text.setAttribute('fill', defaultFillColor);
+            const textFillColor = defaultFillColor || defaultStrokeColor || 'rgb(0, 0, 0)';
+            text.setAttribute('fill', textFillColor);
             text.setAttribute('fill-opacity', defaultFillOpacity);
-            text.setAttribute('style', `font-weight: ${weight};font-size:${size}px;font-family: ${getFontFamily(fontResObj[font])};`)
+            text.setAttribute('style', `font-weight: ${weight};font-size:${size}px;font-family: ${getFontFamily(fontResObj[font])};color:${textFillColor};`)
             svg.appendChild(text);
         }
 

package/vendor/dltech/ofd/ofd_util.js

@@ -192,8 +192,7 @@ export const calTextPoint = function (textCodes) {
         let textStr = textCode['#text'];
         if (textStr) {
             textStr += '';
-            textStr = decodeHtml(textStr);
-            textStr = textStr.replace(/ /g, ' ');
+            textStr = decodeOfdText(textStr);
             for (let i = 0; i < textStr.length; i++) {
                 if (i > 0 && deltaXList.length > 0) {
                     x += deltaXList[(i - 1)];
@@ -232,7 +231,7 @@ export const getExtensionByPath = function (path) {
 }
 
 
-let REGX_HTML_DECODE = /&\w+;|&#(\d+);/g;
+let REGX_HTML_DECODE = /&\w+;|&#(x?[0-9a-fA-F]+);/g;
 
 let HTML_DECODE = {
     "&lt;": "<",
@@ -253,8 +252,9 @@ export const decodeHtml = function (s) {
                 var c = HTML_DECODE[$0];
                 if (c == undefined) {
                     // Maybe is Entity Number
-                    if (!isNaN($1)) {
-                        c = String.fromCharCode(($1 == 160) ? 32 : $1);
+                    if ($1) {
+                        const codePoint = /^x/i.test($1) ? parseInt($1.slice(1), 16) : parseInt($1, 10);
+                        c = Number.isFinite(codePoint) ? String.fromCodePoint((codePoint == 160) ? 32 : codePoint) : $0;
                     } else {
                         c = $0;
                     }
@@ -263,6 +263,17 @@ export const decodeHtml = function (s) {
             });
 };
 
+export const decodeOfdText = function (s) {
+    s = decodeHtml(s);
+    if (typeof s != "string") {
+        return s;
+    }
+    return s.replace(/\\0x([0-9a-fA-F]{4,6})/g, function (_, hex) {
+        const codePoint = parseInt(hex, 16);
+        return Number.isFinite(codePoint) ? String.fromCodePoint((codePoint == 160) ? 32 : codePoint) : _;
+    });
+}
+
 let FONT_FAMILY = {
     '楷体': '楷体, KaiTi, Kai, simkai',
     'kaiti': '楷体, KaiTi, Kai, simkai',

package/vendor/dltech/ofd/ses_signature_parser.js

@@ -0,0 +1,196 @@
+/*
+ * ofd.js - A Javascript class for reading and rendering ofd files
+ * <https://github.com/DLTech21/ofd.js>
+ *
+ * Copyright (c) 2020. DLTech21 All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ * Display-only SES signature parser for File Viewer:
+ * extracts seal picture bytes for preview, skips crypto verification
+ * so ASN.1/国密校验不会进入预览主路径。
+ */
+
+import Hex from '../../lapo-asn1js/hex.js';
+import Base64 from '../../lapo-asn1js/base64.js';
+import ASN1 from '../../lapo-asn1js/asn1.js';
+
+const reHex = /^\s*(?:[0-9A-Fa-f][0-9A-Fa-f]\s*)+$/;
+
+const unwrapDefault = (mod) => (mod && typeof mod === 'object' && 'default' in mod ? mod.default : mod);
+
+const HexApi = unwrapDefault(Hex);
+const Base64Api = unwrapDefault(Base64);
+const ASN1Api = unwrapDefault(ASN1);
+
+export const parseSesSignature = async function (zip, name, getEntry) {
+    const entry = typeof getEntry === 'function' ? getEntry(zip, name) : zip.files[name];
+    if (!entry) {
+        return {};
+    }
+    try {
+        const bytes = await entry.async('base64');
+        return decodeText(bytes);
+    } catch (e) {
+        console.warn('[ofd] parseSesSignature failed', name, e);
+        return {};
+    }
+};
+
+const decodeText = function (val) {
+    try {
+        const der = reHex.test(val) ? HexApi.decode(val) : Base64Api.unarmor(val);
+        return decode(der);
+    } catch (e) {
+        console.warn('[ofd] decode SES signature text failed', e);
+        return {};
+    }
+};
+
+const decode = function (der, offset) {
+    offset = offset || 0;
+    try {
+        const SES_Signature = decodeSES_Signature(der, offset);
+        const picture = SES_Signature?.toSign?.eseal?.esealInfo?.picture;
+        if (!picture?.data?.byte?.length) {
+            return {};
+        }
+        const type = (picture.type?.str || picture.type || '').toString().toLowerCase();
+        return {
+            ofdArray: picture.data.byte,
+            type,
+            // 预览只保留轻量元数据，避免把 DER/证书二进制塞进 DOM data-*。
+            SES_Signature: {
+                realVersion: SES_Signature.realVersion,
+                displayOnly: true,
+                pictureType: type,
+                pictureWidth: picture.width,
+                pictureHeight: picture.height,
+                sealName: SES_Signature.toSign?.eseal?.esealInfo?.property?.name,
+            },
+            verifyRet: true,
+        };
+    } catch (e) {
+        console.warn('[ofd] decode SES signature failed', e);
+        return {};
+    }
+};
+
+const decodeUTCTime = function (str) {
+    str = String(str || '').replace('Unrecognized time: ', '');
+    str = str.replace('Z', '');
+    str = str.substr(0, 1) < '5' ? '20' + str : '19' + str;
+    return str;
+};
+
+const parseStringUTF = function (node) {
+    if (!node) {
+        return '';
+    }
+    return node.stream.parseStringUTF(node.stream.pos + node.header, node.stream.pos + node.header + node.length);
+};
+
+const parseInteger = function (node) {
+    if (!node) {
+        return undefined;
+    }
+    return node.stream.parseInteger(node.stream.pos + node.header, node.stream.pos + node.header + node.length);
+};
+
+const parseOctetBytes = function (node) {
+    if (!node) {
+        return new Uint8Array(0);
+    }
+    return node.stream.enc.subarray(node.stream.pos + node.header, node.stream.pos + node.header + node.length);
+};
+
+const parseTimeNode = function (node, utc) {
+    if (!node) {
+        return '';
+    }
+    const raw = node.stream.parseTime(node.stream.pos + node.header, node.stream.pos + node.header + node.length, utc);
+    return decodeUTCTime(raw);
+};
+
+const decodeSES_Signature = function (der, offset) {
+    offset = offset || 0;
+    const asn1 = ASN1Api.decode(der, offset);
+    let SES_Signature;
+    try {
+        // V1
+        const createDate = parseTimeNode(asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[3]);
+        const validStart = parseTimeNode(asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[4]);
+        const validEnd = parseTimeNode(asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[5]);
+        const pictureNode = asn1.sub[0]?.sub[1]?.sub[0]?.sub[3];
+        SES_Signature = {
+            realVersion: 1,
+            toSign: {
+                eseal: {
+                    esealInfo: {
+                        property: {
+                            name: parseStringUTF(asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[1]),
+                            createDate,
+                            validStart,
+                            validEnd,
+                        },
+                        picture: {
+                            type: parseStringUTF(pictureNode?.sub[0]),
+                            data: { byte: parseOctetBytes(pictureNode?.sub[1]) },
+                            width: parseInteger(pictureNode?.sub[2]),
+                            height: parseInteger(pictureNode?.sub[3]),
+                        },
+                    },
+                },
+            },
+        };
+    } catch (e) {
+        try {
+            // V4
+            const pictureNode = asn1.sub[0]?.sub[1]?.sub[0]?.sub[3];
+            SES_Signature = {
+                realVersion: 4,
+                toSign: {
+                    eseal: {
+                        esealInfo: {
+                            property: {
+                                name: parseStringUTF(asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[1]),
+                                createDate: asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[4]?.stream.parseTime(
+                                    asn1.sub[0].sub[1].sub[0].sub[2].sub[4].stream.pos + asn1.sub[0].sub[1].sub[0].sub[2].sub[4].header,
+                                    asn1.sub[0].sub[1].sub[0].sub[2].sub[4].stream.pos + asn1.sub[0].sub[1].sub[0].sub[2].sub[4].header + asn1.sub[0].sub[1].sub[0].sub[2].sub[4].length
+                                ),
+                                validStart: asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[5]?.stream.parseTime(
+                                    asn1.sub[0].sub[1].sub[0].sub[2].sub[5].stream.pos + asn1.sub[0].sub[1].sub[0].sub[2].sub[5].header,
+                                    asn1.sub[0].sub[1].sub[0].sub[2].sub[5].stream.pos + asn1.sub[0].sub[1].sub[0].sub[2].sub[5].header + asn1.sub[0].sub[1].sub[0].sub[2].sub[5].length
+                                ),
+                                validEnd: asn1.sub[0]?.sub[1]?.sub[0]?.sub[2]?.sub[6]?.stream.parseTime(
+                                    asn1.sub[0].sub[1].sub[0].sub[2].sub[6].stream.pos + asn1.sub[0].sub[1].sub[0].sub[2].sub[6].header,
+                                    asn1.sub[0].sub[1].sub[0].sub[2].sub[6].stream.pos + asn1.sub[0].sub[1].sub[0].sub[2].sub[6].header + asn1.sub[0].sub[1].sub[0].sub[2].sub[6].length
+                                ),
+                            },
+                            picture: {
+                                type: parseStringUTF(pictureNode?.sub[0]),
+                                data: { byte: parseOctetBytes(pictureNode?.sub[1]) },
+                                width: parseInteger(pictureNode?.sub[2]),
+                                height: parseInteger(pictureNode?.sub[3]),
+                            },
+                        },
+                    },
+                },
+            };
+        } catch (inner) {
+            console.warn('[ofd] unsupported SES signature structure', inner);
+            SES_Signature = {};
+        }
+    }
+    return SES_Signature;
+};

package/vendor/lapo-asn1js/README.md

@@ -0,0 +1,3 @@
+# @lapo/asn1js browser ESM vendoring
+
+Vendored from @lapo/asn1js@1.2.1 for browser-safe OFD SES signature parsing.