Am 22.08.2016 um 15:14 schrieb Davide Zoni:
Hallo everybody,

i'm using PDFbox to check if a PDF file contains malicious scripts. I'm using the 
PDF/A-1a validation to check the file. Since i'm searching only for potential damaging 
code and not for a true PDF/A-1a standard accompliance, is it enough to consider 1.x.x, 
6.x.x and 7.x.x errors as "true" errors? Below category description:

Category        Description
1[.y[.z]]       Syntax Error
2[.y[.z]]       Graphic Error
3[.y[.z]]       Font Error
4[.y[.z]]       Transparency Error
5[.y[.z]]       Annotation Error
6[.y[.z]]       Action Error
7[.y[.z]]       Metadata Error

Unclear what you're asking. Are you seeking to detect files with javascript? If so, I'd rather build something something from scratch, i.e. read the PDF specification and see where JS is used. Maybe compare with the preflight source code to check that you didn't miss something.

Tilman


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org

Reply via email to