SnapOtterandGitHub 50d12c6aba fix(doc-engine): keep protect-pdf passwords out of qpdf's argv (#708) ...

qpdf expands argument files before parsing options, so a bare positional password
beginning with @ was resolved as a path and the file's contents became the
encryption key: exit 0, and the user's own password no longer opened the PDF.

Drive the encrypt through a job-JSON file so neither password reaches argv. The
=-joined flag form needs qpdf 11.7+, and the released image carries 11.3.0 which
rejects it; job JSON works on both (verified 11.3.0 and 12.1.0, R = 6 each).

2026-08-01 14:54:56 +08:00

..

helpers

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

binaries.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

ghostscript.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

libreoffice.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

pandoc-kills.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

pandoc.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

pdf-ops.test.ts

fix(doc-engine): keep protect-pdf passwords out of qpdf's argv (#708)

2026-08-01 14:54:56 +08:00

pdfcpu.test.ts

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

python-docs.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00

qpdf.test.ts

test: coverage campaign and mutation testing across five packages (#628)

2026-07-24 17:36:57 +08:00