SetaPDF-Signer Digital sign PDF documents with PHP

SetaPDF-Signer Component

Feature

• Added extractSignedVersion() and getByteRange() methods to IntegrityResult class.
• Added IntegrityResult::coversWholeDocument() method for a more speaking method name (result is isSignedRevision() negated).

Bugfix

• Fixed DocumentSecurityStore::getValidationRelatedInfo() method if no TU and no TS entry are available.

Tweak

• Fixed unnecessary Collection::findBySubject() calls in Certificate::getIssuers().
• Added ValidationRelatedInfo\Logger::reset() method.
• End processing of verification related information if a certificate is revoked by an OCSP response (not only at the CRL check).

SetaPDF-Core Component

Feature

• Added support for handling of structure destinations in Destination class.
• Added support for WebP images (The PDF format doesn't support WebP natively but the images are converted internally by GD functionalities to either PNG or JPEG).

Bugfix

• Fixed password preparation (SASLprep) if it includes the pipe (Ux007C) character for AES265 security handler.
• Fixed handling of null values in destination arrays.
• Fixed handling of recursion when resolving inherited attributes in faulty page tree.
• Fixed handling of /Prev value in view to recursion when parsing cross-references.
• Clone named Cmap instances to decouple assigned CID maps.
• Fixed unbounded allocation in Predictor class which could cause an out-of-memory error.

Tweak

• Optimized cache key creation in Font::getCharByCharCode().
• Harden data types by using ensureType() calls and explicit data type and sanity checks in CrossReferenceTable class.
• Introduced setasign\SetaPDF2\Core\Parser\CrossReferenceTable\FatalException class which is thrown if it is not possible to use a fallback strategy to parse a cross-reference.
• Added plausibility checks for object counts in object streams.
• Added various checks for a valid key-length in SecHandler\SecHandler and SecHandler\AbstractHandler class.