Skip to content

Security: clearhowguide/pdf-compressor

Security

SECURITY.md

Security Policy

Thank you for helping keep ClearHowGuide Private PDF Compressor secure.

Supported versions

Version Supported
1.x Yes
Older development versions No

Responsible disclosure

Please do not publish exploitable security vulnerabilities in public GitHub issues.

Use the official ClearHowGuide contact page:

https://clearhowguide.com/en/contact/

Describe:

  • the affected component;
  • steps to reproduce;
  • browser and operating system;
  • expected security impact;
  • suggested mitigation if known.

Do not attach confidential or personal PDF files.

Security design goals

The compressor is designed to:

  • process PDF contents locally;
  • avoid remote compression servers;
  • avoid persistent storage of PDF contents;
  • perform heavy processing in workers;
  • validate generated output;
  • limit file size;
  • keep third-party provenance documented.

PDF files are untrusted input. Contributions should not weaken these boundaries.

There aren't any published security advisories