Sjoerd Langkemper

Thanks for your feedback. Are you using the GUI or the command-line interface? Are you scanning recursively? I guess it makes sense to only scan files with "mp3" as extension...

This happens if the file has less than 10 valid MP3 frames. You can show more information using the --verbose flag: mpck --verbose yourfile.mp3

Thanks, @brianclemens. Apparently ffmpeg [gets the correct filesize](https://github.com/dji-sdk/FFmpeg/blob/master/libavformat/mp3dec.c#L168) from the Xing/Info tags. Currently mpck does not parse this tag, but it could indeed provide useful information for detecting cut off.

Todo: * ~Combo_AddDrives in rebar.c~ * ~Commented sprintf in mp3checker.c~ * fileerror in checkfile.c * error in checkarguments.c * ~merge declarations in checkarguments.h~

I am getting convinced that using TCHAR is not the right way to approach this. Instead we should use UTF8 and only convert to UTF16 when calling Windows API functions.

I could reproduce your issue locally. The Windows builds are indeed lacking unicode support. I have improved this in [this branch](https://github.com/Sjord/checkmate/tree/windows-unicode). Could you please try out [this mp3checker](https://github.com/Sjord/checkmate/files/1035985/mp3checker-debug-unicode-0.20-dev.zip) and let...

I have put this in PR #23. There is some work to be done in that PR, and that is still only for the MP3 Checker GUI, not for the...

14.4.3 does not really specify how well the CSP should protect against XSS. If you want a CSP that actually blocks all XSS, that could be next to impossible for...

> Verify that all application flows including authentication, session management and access control, maintain a consistent application and user state I interpret this as keeping information in multiple places, and...

The attack scenario is as follows: An application has the functionality to load files from the internet. On its local network is also an API server or Redis server. The...