open/llm-ingestion-pipeline-security
1
0
Fork 0
Code Issues Releases 4 Activity

docs(readme): drop docx-tables/pptx-groups from known gaps (covered in 2g)

Browse source
This commit is contained in:
Kjell Tore Guttormsen 2026-07-07 07:32:38 +02:00
commit a46a96db0a
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
README.md
View file

@ -135,8 +135,7 @@ that a green scan means safe content:
— the binary layer needs a separate scanner. The front-end owns the container — the binary layer needs a separate scanner. The front-end owns the container
threats it *can* see (zip-slip → path gate, zip-bomb → size cap, symlink threats it *can* see (zip-slip → path gate, zip-bomb → size cap, symlink
refusal, CSV formula-lead cells). Known gaps: `.xlsx` (openpyxl) and `.pdf` refusal, CSV formula-lead cells). Known gaps: `.xlsx` (openpyxl) and `.pdf`
extraction, `.docx` tables, grouped `.pptx` shapes, and the numeric `-`/`+` CSV extraction, and the numeric `-`/`+` CSV false positive.
false positive.
- **Lexicon findings are deduplicated by pattern id** — `count=1` and the first - **Lexicon findings are deduplicated by pattern id** — `count=1` and the first
offset are reported, so the same class matched across several channels/variants offset are reported, so the same class matched across several channels/variants
collapses to one finding at its first location. This keeps reports readable, but collapses to one finding at its first location. This keeps reports readable, but