Release Format Lab 0.1.0
This commit is contained in:
@@ -0,0 +1,17 @@
|
||||
# Privacy and security
|
||||
|
||||
Selected files, converted data, and evidence reports remain in browser memory.
|
||||
There is no upload, telemetry, analytics, remote reference resolution, account,
|
||||
external font, or codec service. Production policy restricts connections to the
|
||||
same origin and browser tests reject unexpected requests.
|
||||
|
||||
JSON uses bounded parsing and rejects prototype-sensitive field names. XML
|
||||
DOCTYPE declarations are disabled, values are rendered as text, and generated
|
||||
XML escapes names and content. CSV parsing is bounded; exports prefix cells that
|
||||
could be interpreted as spreadsheet formulas. All outputs are explicit
|
||||
user-triggered downloads.
|
||||
|
||||
A matching round-trip signature is evidence only for the bounded canonical
|
||||
properties and supplied sample. It is not proof of standard conformance,
|
||||
metadata preservation, codec quality, accessibility, or losslessness for other
|
||||
files, implementations, settings, or future tool versions.
|
||||
Reference in New Issue
Block a user