Chris Down wrote: The file type is scanned. Also, I run a bot doing stricter checks on the file contents for all commons uploads (could extend to other projects if you want). It could also pass a virus scan but I don't think it's really needed. Virus scanners mainly look for known bad code, inside executables. We don't want any kind of executable. It isn't too specific, so would be hard to detect. What we could do is to reject pdfs containing javascript. An unneeded feature IMHO. It has been used more as attack vector than legitimately. Do you know of a tool which could detect that? I don't think pdfinfo provides that. In any case, pdfs don't stay too much. They are a headache for a different reason. About 99% pdf uploads really shouldn't have been uploaded as pdf.

On Fri, Feb 20, 2009 at 10:03 AM, David Gerard <dgerard(a)gmail.com> wrote: If such a round-trip would suppress this (and I have no idea), the next question would be whether it would suppress or reduce in quality any of the other content that we actually do care about. In general such processes often have unintended consequences that make them undesirable. -Robert Rohde

On Fri, Feb 20, 2009 at 12:57 PM, Platonides <Platonides(a)gmail.com> wrote: [snip] I've run clamav against the entire set of files in the past. Found a couple of interesting things (like, 3 files out of millions). Converting pdftops and back will probably totally kill the text layer. Might as well render to images and djvu.