qpdf
horrifying-pdf-experiments
Our great sponsors
qpdf | horrifying-pdf-experiments | |
---|---|---|
18 | 13 | |
3,052 | 1,418 | |
4.7% | - | |
9.5 | 0.0 | |
4 days ago | over 3 years ago | |
C++ | Python | |
Apache License 2.0 | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
qpdf
-
🔍Underrated Open Source Projects You Should Know About đź§
QPDF is a CLI tool that performs content-preserving transformations on PDF files. We have another tool for managing files!
-
Insecure Features in PDFs
Given how well Preview.app and Safari work for viewing >99% of PDFs I actually encounter in the wild, this article makes Apple's engineering decisions look good.
It also confirms many suspicions I've had over the years that have led me to, e.g., running all PDFs from questionable sources through VirusTotal before viewing on platforms where I wouldn't normally run antivirus software.
The original article also confirms my suspicions that this step is inadequate:
Because the Launch action can be considered as a danger- ous feature, we conducted a large-scale evaluation of 294,586 PDF documents downloaded from the Internet, in order to research if there are any legitimate use cases at all. Of those documents, only 532 files (0.18%) contained a Launch action. While none of the files was classified as malicious according to the VirusTotal database, we conclude that the Launch action is rarely used in the wild and its support should be removed by PDF implementations as well as the standard.
Incidentally, the Launch action is still present in the most recent version of the PDF standard[1], with only OS-specific launch parameters deprecated (which include passing arguments to the launched executable, so eliminating the deprecated feature is still a significant security gain).
Finally, I'm both personally and professionally curious about how the non-DoS examples in this articles may apply to non-viewer PDF tools and libraries like qpdf[2] and Ghostscript's original and recently reimplemented PDF interpreters[3].
[1] https://pdfa.org/resource/iso-32000-pdf/
(registration required, but at least the base standard is available at no cost; sadly, important incorporated standards like ISO 21757-1:2020 [ECMAScript for PDF] are not)
[2] https://qpdf.sourceforge.io
[3] https://ghostscript.com/blog/pdfi.html
-
Jim Keller criticizes Nvidia CUDA, x86 – 'CUDA's a swamp, not a moat, like x86'
I know you're talking about GUI editing, but I've found libqpdf[1] incredibly useful for making programmatic PDF edits with minimal (typically no) structural disturbance.
[1] https://qpdf.sourceforge.io
-
How to remove all metadata & identifiers when uploading Elsevier articles to libgen?
Solved this. So the string which we were concerned about depends on the time, which is why it changes everytime a new document is generated with the same source PDF. it is a meaningless string really. from the documentation, it gives this explanatin. To be sure, i raised an issue with the guys at QPDF and they were quick to answer the question too. The explanation theyve given is even more clearer.
- I wanna design UI/Ux for open source!
-
qpdf.el: A transient Emacs wrapper for qpdf
Hi, this is my first Emacs package! It provides a transient wrapper for the qpdf command-line tool aimed especially at users of pdf-tools or at least DocView. With it one can, for example, remove/reorder/split/rotate pages of a pdf file, merge pdf files, remove annotations, and apply a range of transformations to a pdf file. See the qpdf documentation.
-
The New Ghostscript PDF Interpreter
There are some here, as test files in the qpdf library: https://github.com/qpdf/qpdf/tree/main/qpdf/qtest/qpdf
(I wrote a low-level PDF parser and ran it over the PDF files that happened to be present on my laptop—just regular ones—and ran into some files that (some) PDF viewers open but even qpdf doesn't. I say "even" because qpdf is really good IMO.)
-
Ask HN: Why is the PDF format so inaccessible?
If you're comfortable handling the (typo)graphical aspects of the PDF yourself and have the ability to consume a C++ library, I've had good experiences using the Apache-licensed qpdf[1] library to handle the low-level structural aspects of the PDF standard. It's particularly convenient when your application requires structure-preserving integration of existing PDF content.
Simple example applications, each completed in 2–3 days, both in C#, using C++/CLI to integrate libqpdf:
1. Overlaying fixed-format text on pre-existing blank PDF form pages, ensuring the content of each distinct form page is embedded exactly once, and that all necessary assets (fonts, images, etc.) from the blank form PDF pages are included in the output PDF.
2. Losslessly combining a sequence of PDF, TIFF, and JPEG images into a single PDF with bookmarks pointing to the first page of each source file and existing image compression maintained where possible. In this application, only the source TIFFs were anything other than arbitrary (i.e., the TIFFs were more-or-less baseline images coming from a small number of scanning systems, but the JPEGs and PDFs came from all sorts of different applications).
[1] https://github.com/qpdf/qpdf
-
unlocking pdfs WITH password
Use qpdf https://github.com/qpdf/qpdf
-
Quick macOS terminal command to batch remove user password from PDF
I was looking for a way on macOS to batch remove the user password from a bunch of PDF files that had the same password. I found the easiest way was to use qpdf with the following command:
horrifying-pdf-experiments
-
SumatraPDF Reader
I think this is it: https://github.com/osnr/horrifying-pdf-experiments
- Breakout.pdf [pdf]
-
SVG or EPS
Here's the link to horrifying-pdf, a GitHub repo with a link that lets you play breakout entirely inside a PDF file.
-
ELI5: How can downloading a pdf or word file give you a virus?
Apparently PDF's have enough weird functionality that you can even build a simple video game in them. Check out https://github.com/osnr/horrifying-pdf-experiments
-
In your opinion, why has no created a functional FOSS PDF editor?
You can even play games embedded into your PDF file
-
Comments for Static Sites without JavaScripts
If you're mocking me for avoiding client-side scripting then without discipline PDF is hardly any better. I disable JS by default (and only turn them for e.g. to reply to you here because Reddit decides to inject forms instead of hiding them via CSS) and the browsing experience is a lot snappier.
-
Unveiling Mighty: a faster browser that is entirely streamed from a powerful computer in the cloud.
[1]: https://github.com/osnr/horrifying-pdf-experiments
-
Firefox 88.0
Depends on your PDF viewer... https://github.com/osnr/horrifying-pdf-experiments
- What are your favorite pdf games?
- Blogs need to go back to document publishing formats. It doesn't get more user-friendly than 1. WYSIWYG word processor; 2. Save As PDF; 3. Dump the file on a web host. I'm switching to PDF/A
What are some alternatives?
pdfcpu - A PDF processor written in Go.
Stirling-PDF - #1 Locally hosted web application that allows you to perform various operations on PDF files
pikepdf - A Python library for reading and writing PDF, powered by QPDF
MPMBs-Character-Record-Sheet - MorePurpleMoreBetter's D&D 5e Character Record Sheet
pdf-lib - Create and modify PDF documents in any JavaScript environment
oss-fuzz - OSS-Fuzz - continuous fuzzing for open source software.
OpenPDF - OpenPDF is a free Java library for creating and editing PDF files, with a LGPL and MPL open source license. OpenPDF is based on a fork of iText. We welcome contributions from other developers. Please feel free to submit pull-requests and bugreports to this GitHub repository.
PDF.js - PDF Reader in JavaScript
TCPDF - Official clone of PHP library to generate PDF documents and barcodes
dxd-file-format - Necessary data for reverse-engineering DXD file format
puppeteer - Node.js API for Chrome
sumatrapdf - SumatraPDF reader