> For the complete documentation index, see [llms.txt](https://docs.malwation.com/cdr/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.malwation.com/cdr/supported-file-types.md).

# Supported File Types

| File type | Description                                           |
| --------- | ----------------------------------------------------- |
| doc       | Microsoft Word 97-2003 Document                       |
| dot       | Microsoft Word 97-2003 Template                       |
| docx      | Microsoft Word 2007+ Document                         |
| docm      | Microsoft Word 2007+ Macro-Enabled Document           |
| dotx      | Microsoft Word 2007+ Template                         |
| dotm      | Microsoft Word 2007+ Macro-Enabled Template           |
| rtf       | Microsoft Rich Text Format                            |
| xls       | Microsoft Excel 97-2003 Workbook                      |
| xlt       | Microsoft Excel 97-2003 Template                      |
| xlsx      | Microsoft Excel 2007+ Workbook                        |
| xlsm      | Microsoft Excel 2007+ Macro-Enabled Workbook          |
| xltx      | Microsoft Excel 2007+ Template                        |
| xltm      | Microsoft Excel 2007+ Macro-Enabled Template          |
| ppt       | Microsoft PowerPoint 97-2003 Presentation             |
| pptx      | Microsoft PowerPoint 2007+ Presentation               |
| pptm      | Microsoft PowerPoint 2007+ Macro-Enabled Presentation |
| odt       | OpenDocument Text                                     |
| ods       | OpenDocument Spreadsheet                              |
| ott       | OpenDocument Document Template                        |
| ots       | OpenDocument Spreadsheet Template                     |
| odp       | OpenDocument Presentation                             |
| otp       | OpenDocument Presentation Template                    |
| html      | Hypertext Markup Language                             |
| pdf       | Adobe Portable Document Format                        |
| xml       | Extensible Markup Language                            |
| ics       | iCalendar                                             |
| lnk       | Windows Shortcut                                      |
| jpg       | JPEG Image                                            |
| jpx       | JPEG 2000                                             |
| bmp       | Windows Bitmap Image                                  |
| png       | Portable Network Graphics                             |
| tiff      | Tagged Image File Format                              |
| svg       | Scalable Vector Graphics                              |
| emf       | Windows Enhanced Metafile                             |
| webp      | Google Image File Format for Web                      |
| dcm       | Digital Imaging and Communications in Medicine        |
| zip       | ZIP Archive                                           |

Notes:

* For images and media files, CDR doesn’t "edit" the visual content, ensuring that the original and sanitized versions maintain the same appearance. However, quality may be affected due to the decoding, processing, and re-encoding steps involved in disarming potential threats.
* When an Excel file is being sanitized, the cleaning time increases as the file size or the number of records grows. If the Excel file is very large, the process may be interrupted depending on system resources.
* MS Office files version 95 or older not supported. Only support 97-2003, 2007 or later.

### Sanitized Objects

* MS Office
  * Word (Currently converts doc to docx if image sanitization is enabled):
    * Remove macro
    * Detect and remove template injection, attachedTemplate
    * Replace external target relations, hyperlinks etc.
    * Sanitize embedded object
    * Remove binary data
    * Remove metadata
    * Sanitize image
  * Excel:
    * Remove vba\_macro, xlm\_macro
    * Remove hyperlinks
    * Remove names (it's like cell name ex:Auto\_Open)
    * Sanitize image
    * Remove metadata
  * Powerpoint
    * Sanitize embedded object
    * Remove binary data
    * Remove macro
    * Sanitize image
* PDF
  * Remove JavaScript
  * Remove suspicious objects
  * Remove embedded files
  * Remove OpenAction
  * Remove AcroForm
  * Remove hyperlinks, metadata
  * Sanitize images
  * Clear overlay data
* HTML
  * Remove JavaScript, iframe
  * Sanitize with whitelist approach
* XML
  * Remove VBA macro
  * Remove DTD entities
  * Remove JavaScript
  * Remove suspicious CDATA
* RTF
  * Remove OLE, suspicious nodes(object/bin/template items)
* Images
  * Reconstruct bitmap images, remove metadata
  * Remove scripts from SVG images
  * Clear DICOM image preamble
  * Remove EMF GDI comment
* Calendar - ICS
  * Sanitize inline attachment
  * Remove external attachment
* OpenDocument
  * Sanitize image
  * Remove macros, OLE objects, hidden text, hyperlink, script
* Archive - ZIP
  * Sanitize all supported files in archive and only recompress sanitized files
