docx

Tool passed security scan

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [2/5]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [3/5]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [4/5]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [5/5]

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/characteristics" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/characteristics" elementFormDefault="qualified"> <xsd:complexType name="CT_AdditionalCharacteristics"> <xsd:sequence> <xsd:element name="characteristic" type="CT_Cha

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/of

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" elementFormDefault="qualified"> <xsd:simpleType name="ST_Lang"> <xsd:restriction base="xsd:string"/> </xsd:simpleType> <xsd:simpleType name="ST_HexColorRGB"> <xsd:r

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/customXml" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/customXml" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all"> <

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/schemaLibrary/2006/main" targetNamespace="http://schemas.openxmlformats.org/schemaLibrary/2006/main" attributeFormDefault="qualified" elementFormDefault="qualified"> <xsd:complexType name="CT_Schema"> <xsd:attribute name="uri" type="xsd:string" default=""/> <xsd:attribute

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/custom-properties" xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/custom-p

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" elementFormDefault="qualified" blockDefault="#all"> <xsd:im

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" blockDefault="#all" elementFormDefault="qualified"> <xsd:import names

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsd [1/2]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsd [2/2]

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" blockDefault="#all"> <xsd:simpleType name="ST_R

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [1/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [2/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [3/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [4/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [5/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [6/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [7/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [8/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [9/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [10/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [11/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [12/13]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [13/13]

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsd [1/2]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsd [2/2]

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd [1/2]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd [2/2]

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:office:powerpoint" targetNamespace="urn:schemas-microsoft-com:office:powerpoint" elementFormDefault="qualified" attributeFormDefault="unqualified">

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:office:excel" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="urn:schemas-microsoft-com:office:excel" elementFormDefault="qualified" attributeFormDefault="unqualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:office:word" targetNamespace="urn:schemas-microsoft-com:office:word" elementFormDefault="qualified" attributeFormDefault="unqualified"> <xsd:element name="bordertop" type="CT_Border"/> <xsd:element name="borderleft" type="CT_Border"/> <xsd:element name="borderright" type="CT_Border"/> <x

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [1/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [2/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [3/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [4/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [5/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [6/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [7/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [8/9]

Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [9/9]

Malicious tool definition detected

Tool: ooxml/schemas/ISO-IEC29500-4_2016/xml.xsd Description: <?xml version='1.0'?> <xs:schema targetNamespace="http://www.w3.org/XML/1998/namespace" xmlns:xs="http://www.w3.org/2001/XMLSchema" xml:lang="en"> <xs:annotation> <xs:documentation> See http://www.w3.org/XML/1998/namespace.html and http://www.w3.org/TR/REC-xml for information about this namespace. This schema document describes the XML namespace, in a form suitable for import by other schema documents.

Malicious tool definition detected

Tool: ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd Description: <?xml version="1.0" encoding="UTF-8" standalone="no"?> <xs:schema xmlns="http://schemas.openxmlformats.org/package/2006/content-types" xmlns:xs="http://www.w3.org/2001/XMLSchema" targetNamespace="http://schemas.openxmlformats.org/package/2006/content-types" elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xs:element name="Types" type="CT_Types"/> <xs:element name="Default" type="CT_Def

Malicious tool definition detected

Tool: ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd Description: <?xml version="1.0" encoding="UTF-8"?> <xs:schema targetNamespace="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" xmlns="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" elementFormDefault="qualified" blockDefault="#all"> <xs:import namespace="h

Malicious tool definition detected

Tool: ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd Description: <?xml version="1.0" encoding="UTF-8"?> <xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:xsd="http://www.w3.org/2001/XMLSchema" targetNamespace="http://schemas.openxmlformats.org/package/2006/digital-signature" elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xsd:element name="SignatureTime" type="CT_SignatureTime"/> <xsd:element name="RelationshipRef

Malicious tool definition detected

Tool: ooxml/schemas/ecma/fouth-edition/opc-relationships.xsd Description: <?xml version="1.0" encoding="UTF-8" standalone="no"?> <xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:xsd="http://www.w3.org/2001/XMLSchema" targetNamespace="http://schemas.openxmlformats.org/package/2006/relationships" elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xsd:element name="Relationships" type="CT_Relationships"/> <xsd:element name="

Malicious tool definition detected

Tool: ooxml/schemas/mce/mc.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <!-- This XSD is a modified version of the one found at: https://github.com/plutext/docx4j/blob/master/xsd/mce/markup-compatibility-2006-MINIMAL

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-2010.xsd [1/2]

Tool: ooxml/schemas/microsoft/wml-2010.xsd [2/2]

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-2012.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2012/wordml" targetNamespace="http://schemas.microsoft.com/office/word/2012/wordml"> <xsd:import id="w12"

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-2018.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2018/wordml" targetNamespace="http://schemas.microsoft.com/office/word/2018/wordml"> <xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" sch

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-cex-2018.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" xmlns:w16="http://schemas.microsoft.com/office/word/2018/wordml" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2018/wordml/cex" targetNamespace="http:

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-cid-2016.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2016/wordml/cid" targetNamespace="http://schemas.microsoft.com/office/word/2016/wordml/cid"> <xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/20

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-sdtdatahash-2020.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2020/wordml/sdtdatahash" targetNamespace="http://schemas.microsoft.com/office/word/2020/wordml/sdtdatahash">

Malicious tool definition detected

Tool: ooxml/schemas/microsoft/wml-symex-2015.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2015/wordml/symex" targetNamespace="http://schemas.microsoft.com/office/word/2015/wordml/symex"> <xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessin

Malicious tool definition detected

Tool: ooxml/scripts/pack.py Description: #!/usr/bin/env python3 """ Tool to pack a directory into a .docx, .pptx, or .xlsx file with XML formatting undone.

Malicious tool definition detected

Tool: ooxml/scripts/unpack.py Description: #!/usr/bin/env python3 """Unpack and format XML contents of Office files (.docx, .pptx, .xlsx)""" import random import sys import defusedxml.minidom import zipfile from pathlib import Path # Get command line arguments assert len(sys.argv) == 3, "Usage: python unpack.py <office_file> <output_dir>" input_file, output_dir = sys.argv[1], sys.argv[2] # Extract and format

Malicious tool definition detected

Tool: ooxml/scripts/validate.py Description: #!/usr/bin/env python3 """ Command line tool to validate Office document XML files against XSD schemas and tracked changes.

Malicious tool definition detected

Tool: ooxml/scripts/validation/__init__.py Description: """ Validation modules for Word document processing.

Malicious tool definition detected

Tool: ooxml/scripts/validation/base.py [1/4] Description: """ Base validator with common validation logic for document files.

Tool: ooxml/scripts/validation/base.py [2/4] Description: all_files.append(file_path.resolve()) # Track all files that are referenced by any .rels file all_referenced_files = set() if self.verbose: print( f"Found {len(rels_files)} .rels files and {len(all_files)} target files" ) # Check each .rels file for rels_file in rels_files: try: # Parse relationships file rels_root = lxml.etree.parse(str(rels_file)).getroot() # Get the directory where this .rels file is located rels_dir = rels_file.parent

Tool: ooxml/scripts/validation/base.py [3/4] Description: for f in all_files if f.is_file()] # Check all XML files for Override declarations for xml_file in self.xml_files: path_str = str(xml_file.relative_to(self.unpacked_dir)).replace( "\\", "/" ) # Skip non-content files if any( skip in path_str for skip in [".rels", "[Content_Types]", "docProps/", "_rels/"] ): continue try: root_tag = lxml.etree.parse(str(xml_file)).getroot().tag root_name = root_tag.split("}")[-1] if "}" in root_tag else ro

Tool: ooxml/scripts/validation/base.py [4/4] Description: error messages from the original file """ import tempfile import zipfile # Resolve both paths to handle symlinks (e.g., /var vs /private/var on macOS) xml_file = Path(xml_file).resolve() unpacked_dir = self.unpacked_dir.resolve() relative_path = xml_file.relative_to(unpacked_dir) with tempfile.TemporaryDirectory() as temp_dir: temp_path = Path(temp_dir) # Extract original file with zipfile.ZipFile(self.original_file, "r") as zip_ref: zip_

Malicious tool definition detected

Tool: ooxml/scripts/validation/docx.py Description: """ Validator for Word document XML files against XSD schemas.

Malicious tool definition detected

Tool: ooxml/scripts/validation/pptx.py [1/2]

Tool: ooxml/scripts/validation/pptx.py [2/2]

Malicious tool definition detected

Tool: ooxml/scripts/validation/redlining.py Description: """ Validator for tracked changes in Word documents.

Malicious tool definition detected

Tool: scripts/__init__.py

Malicious tool definition detected

Tool: scripts/document.py [1/4] Description: #!/usr/bin/env python3 """ Library for working with Word documents: comments, tracked changes, and editing.

Tool: scripts/document.py [2/4] Description: in list(run.getElementsByTagName("w:t")): del_text = self.dom.createElement("w:delText") # Copy ALL child nodes (not just firstChild) to handle entities while t_elem.firstChild: del_text.appendChild(t_elem.firstChild) for i in range(t_elem.attributes.length): attr = t_elem.attributes.item(i) del_text.setAttribute(attr.name, attr.value) t_elem.parentNode.replaceChild(del_text, t_elem) # Move all children from ins to del wrapper while ins_elem.firstChil

Tool: scripts/document.py [3/4] Description: rsid: Optional RSID to use for all comment elements.

Tool: scripts/document.py [4/4] Description: if it doesn't exist.""" if not path.exists(): # Copy from template shutil.copy(TEMPLATE_DIR / "people.xml", path) def _add_content_type_for_people(self, path): """Add people.xml content type to [Content_Types].xml if not already present.""" editor = self["[Content_Types].xml"] if self._has_override(editor, "/word/people.xml"): return # Add Override element root = editor.dom.documentElement override_xml = '<Override PartName="/word/people.xml" ContentT

Malicious tool definition detected

Tool: scripts/templates/comments.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

Malicious tool definition detected

Tool: scripts/templates/commentsExtended.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

Malicious tool definition detected

Tool: scripts/templates/commentsExtensible.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

Malicious tool definition detected

Tool: scripts/templates/commentsIds.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

Malicious tool definition detected

Tool: scripts/templates/people.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

Malicious tool definition detected

Tool: scripts/utilities.py [1/2] Description: #!/usr/bin/env python3 """ Utilities for editing OOXML documents.

Tool: scripts/utilities.py [2/2] Description: the next available rId for relationships files.""" max_id = 0 for rel_elem in self.dom.getElementsByTagName("Relationship"): rel_id = rel_elem.getAttribute("Id") if rel_id.startswith("rId"): try: max_id = max(max_id, int(rel_id[3:])) except ValueError: pass return f"rId{max_id + 1}" def save(self): """ Save the edited XML back to the file.

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan