Configurations

To enable Deep CDR, go to Workflow Managements > Workflows > [Workflow name] > Enable Deep CDR

To enable file types to be processed

To enable Archive file types sanitization, go to the Compression tab

Update the "Enable for archive compression filetypes"

Advanced Configurations

Deep CDR can be configured via workflow or rules within administrator management console. For each file type, it is customizable via module configuration, which objects to remove. For example, you can configure to remove macro while keeping hyperlinks.

The engine configuration is accessible under Workflow Management > Workflow > {Workflow name} > Deep CDR > Advanced configuration > File type handling > {File type}

PDF

  • Remove Macro: Remove JavaScript and document open action.

  • Remove Embedded Object: Remove embedded objects including attachments, embedded files, etc. Applicable when recursive sanitization is not performed.

  • Recursive Level: Enable/disable recursive sanitization. Default is 1 level.

  • Process Hyperlink Behavior: Remove hyperlink annotations and change hyperlinks in text (plain text strings that PDF readers recognize as hyperlinks and highlight automatically).

    • Remove hyperlink annotations only.
    • Remove hyperlink annotations and text links.
    • Remove hyperlink annotations and prevent clickable links auto-tuning.
    • Remove hyperlink annotations and leave them in text form.
    • Add hyperlink prefix.
    • Return list of hyperlinks.
    • Do nothing (Keep as is).

  • Process Image:

    • Process Raw Image: Raw images are images that cannot be extracted to be standalone like normal images. They usually require large resources to process.

  • Remove Metadata

  • Remove Embedded Font: Remove all embedded fonts; may break some non-English content (like Hebrew or Arabic).

  • Process Form: Process operational form fields.

  • Remove Web Capture Content: Remove Web Capture content database objects (/IDS, /URLS) and related data (SpiderInfo and capture command).

  • Strict Validation: Strictly report standard compliance issues or ignore slight error in file structure.

  • Skip Signed File: Skip processing PDF file with digital signature, produce a same file as original.

    • Note: The sanitization process still produces a sanitized file, however, it is the same as the original file.

  • Validate digital signature

  • Process 3D object

  • Process PostScript Object: PostScript object data are set to empty and related streams are removed.

  • Remove User-Defined Named Action: Named actions are predefined actions that can force the PDF viewer application to invoke an action that might adversely impact the system. User-Defined Named Actions object data are set to empty and related streams are removed.

  • Allowed Named Actions: List of Named actions should be allowed.

    • Note: NextPage, PrevPage, FirstPage, and LastPage are always allowed as they just navigate around a document.

Office Document

Microsoft Word/Excel/Powerpoint document

  • Process Macro: Process macro, DDE protocol and document open action in DOC/DOT/DOCM/DOTM/XLS/XLT/XLSM/XLTM/XLSB/XLAM/PPT/PPS/POT/PPTM/PPSM/SLDX/SLDM.

    • Remove all macro.
    • Skip allowlisted macro.
    • Do nothing (Keep as is).

  • Remove Custom XML

  • Remove Chart

  • Remove Embedded Object: Remove all embedded objects including attachments, embedded files, etc.

  • Process Hyperlink Behavior:

    • Remove hyperlink.
    • Add hyperlink prefix.
    • Return list of hyperlinks.
    • Do nothing (Keep as is).

  • Process Image

  • Sanitize QR Code: Hyperlink in QR code is detected and processed based on Image Configuration.

  • Remove Comment: is applied to DOCX family (DOCX, DOTX, DOCM, etc.), XLSX family (XLSX, XLSM, XLSB, etc.), PPTX family (PPTX, PPTM, PPSX, etc.).

  • Remove Revision: is applied to DOCX family (DOCX, DOTX, DOCM, etc.) only.

  • Remove Metadata

  • Remove Embedded Font

  • Remove Hidden Text: Remove texts that were hidden in the document.

  • Cleanup Unused Resources: Remove unused styles and lists from DOC/DOT/XLS/XLT files.

  • Recursive Level: Enable/disable recursive sanitization. Default is 1 level.

  • Skip Signed File: Skip processing file with digital signature, produce a same file as original.

Microsoft OneNote document

  • Remove Embedded Object: Remove all embedded objects including attachments, embedded files, etc.
  • Process Image
  • Process Hyperlink Behavior:
    • Remove hyperlink.
    • Add hyperlink prefix.
    • Do nothing (Keep as is).

RTF

  • Remove Embedded Object: Remove all embedded objects including attachments, embedded files, etc.

  • Process Hyperlink Behavior:

    • Remove hyperlink.
    • Add hyperlink prefix.
    • Do nothing (Keep as is).

  • Remove Embedded HTML: Remove HTML tags containing malicious HTML nodes.

    • Remove HTML tags containing malicious nodes.
    • Remove all HTML tags.
    • Do nothing.

  • Process Image

  • Process font table: Remove embedded font table. Font table exceeding a font count setting will be removed.

Microsoft Visio Drawing

  • Process Macro

  • Remove Embedded Object: Remove all embedded objects including attachments, embedded files, etc.

  • Process Hyperlink Behavior:

    • Remove hyperlink.
    • Add hyperlink prefix.
    • Do nothing (Keep as is).

  • Process Image

  • Remove Metadata

  • Recursive Level: Enable/disable recursive sanitization. Default is 1 level.

Image

Deep CDR supports sanitization for AutoCAD, raster and vector image files.

Raster image files

  • Sanitize QR code: Hyperlink in QR code is detected and processed. Process Hyperlink Behavior:

    • Add hyperlink prefix.
    • Return list of hyperlinks.

  • Remove Metadata

  • Remove ICC Profile: Remove ICC profile in JPG files.

  • Remove GeoTIFF tags: Remove or preserve private TIFF tags which store georeferencing information.

  • Image quality: is applied for JPG image (as original or balanced).

  • GIF Layer Count Limit: Maximum normalized layer count of GIF, applicable to GIF only. GIF files with layer count exceeding this value will be skipped from processing.

  • TIFF Size Limit: Maximum decompressed image size on memory for TIFF, set to 0 for unlimited size.

SVG

  • Remove JavaScript: Remove JavaScript code that may harm the system.
  • Remove CDATA: Remove character data that may embed harmful program.
  • Remove Injection: Remove SVG injection to prevent execution of harmful program.
  • Process Image: Process raster images included inside SVG file.
  • Process Embedded Image: Process raster images and vector graphiccs within the SVG files.

DWF

  • Remove Embedded Font
  • Process Hyperlink Behavior: Remove all hyperlinks, Add hyperlink prefix or Do nothing (Keep as is).
  • Process Image: Process raster images included inside SVG file.

DWG

  • Remove Macro

TXT

  • Remove Invisible Character: Remove non-printable UTF-8 characters in these categories:
    • Format character (cf): U+00AD (Soft Hyphen - SHY), U+200E (Left-to-right mark), U+200F (Right-to-left mark), ...
    • Control character (cc): U+0000 (NULL), U+0001 (Start of heading), U+0002 (Start of text)
    • Private use character (co): U+E000 to U+F8FF, U+F0000 to U+FFFFD, U+100000 to U+10FFFD
    • Unassigned character (cn): code points that have not been assigned characters by the Unicode standard.
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
Retain password protection on sanitized files
On This Page
ConfigurationsAdvanced ConfigurationsPDFOffice DocumentMicrosoft Word/Excel/Powerpoint documentMicrosoft OneNote documentRTFMicrosoft Visio DrawingImageRaster image filesSVGDWFDWGTXT