open/llm-ingestion-pipeline-security
1
0
Fork 0
Code Issues Releases 6 Activity
llm-ingestion-pipeline-secu.../tests
History
Exact
Kjell Tore Guttormsen 0ebe8abdbd
 feat(output): report hidden markup — tiny font, invisible colour, comments outside code 
Session 5 of the 2026 threat plan (attack row 3): A04 and A15 were red.

- html-obfuscation:tiny-font (HIGH): font below 4px. ShadowLeak's 1px passed
  because the commons zero-font row only matches a leading 0.
- html-obfuscation:invisible-colour (HIGH): text within 8 per channel of the
  background in the same style attribute, or transparent. White alone is not
  a signal (email buttons); measured residual in LIMITATIONS.
- output:html-comment-present (MEDIUM): a comment in the artifact outside
  fenced code and inline code. 253/254 comments in the reference corpus sit
  in code.

Local to output.py; the vendored lexicon stays byte-equal with commons.
Guard rule before/after: FP 106/198, 196/2918, 108/389 identical; OKF 6/53
and 47/31 identical. Matrix 139/139, ReDoS 161 patterns 0 flagged, suite
1142 passed + 6 xfailed. Row 3: 12 caught, 1 gap, 6 open.
2026-10-31 17:01:39 +01:00
..
inbox_frontend.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
redos_clock.py test(redos): the dead row had the wrong payload, and the last wall clock is retired 2026-08-13 21:47:43 +02:00
test_active_content.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_attacks_2026.py feat(output): report hidden markup — tiny font, invisible colour, comments outside code 2026-10-31 17:01:39 +01:00
test_calibration.py feat(output): report hidden markup — tiny font, invisible colour, comments outside code 2026-10-31 17:01:39 +01:00
test_catalog_census.py test(threat-2026): freeze the catalog-number census at v1.4.1 2026-10-28 21:27:31 +01:00
test_catalog_numbers.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_catalog_register.py docs(catalogs): wire ASI06 and ATLAS v2026.10 into the README, date every source 2026-10-31 16:29:35 +01:00
test_contract.py fix(security): harden 5 adversarial-review findings (M1/M2/M3 + m4/m6) via TDD 2026-07-05 10:45:05 +02:00
test_corpus.py measure(fp): the upload door costs a human on 16-53% of benign documents 2026-08-10 21:32:56 +02:00
test_coverage_matrix.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_disposition.py docs(plan): kill the pointer that sent this session to the wrong section 2026-08-10 21:01:19 +02:00
test_docs_measurement_scripts.py feat(output): report hidden markup — tiny font, invisible colour, comments outside code 2026-10-31 17:01:39 +01:00
test_entropy.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_fence.py feat(fence): randomized unspoofable delimiter + attacker marker-strip (TDD) [skip-docs] 2026-07-04 18:23:35 +02:00
test_grounding.py feat(grounding): SourceGroundingCheck protocol + pass-through default — the semantic-poisoning seam (TDD) [skip-docs] 2026-07-04 22:44:41 +02:00
test_hidden_markup.py feat(output): report hidden markup — tiny font, invisible colour, comments outside code 2026-10-31 17:01:39 +01:00
test_input_cap.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_invisible.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_lexicon.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_neutralize.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_okf.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_okf_inbox_uploads.py feat(inbox): .xlsx extraction — formula gate, hidden sheets, cell comments (stage 2h) 2026-07-07 07:41:00 +02:00
test_okf_showcase.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_output.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_report.py feat: scaffold package + report and sanitize modules (TDD) 2026-07-04 09:24:20 +02:00
test_sanitize.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_showcase.py fix(owasp): qualify every catalog number with the 2026 edition 2026-10-31 14:20:35 +01:00
test_url_shape_doc.py docs(url-shape): make the rule reconstructable, and record what three corpora measured 2026-07-27 08:56:24 +02:00
test_wiring.py feat(active-content): raw HTML graded on carrier, and a tag naming no target is inert 2026-08-12 00:42:44 +02:00