The formats added after Phase 1 (Office, OpenDocument, TIFF, GIF, HEIF/AVIF, SVG, JPEG XL, FLAC, WAV, MP3, Ogg, MP4) were checked mostly against generated files (KNOWN_LIMITATIONS). Files from real cameras, phones and apps are what's missing.
Take a file of your own in one of those formats, run strypt strip on it, and compare exiftool -a -G1 on the input and the output. Report the format, the producing app or device, and field names only as an issue.
If identifying metadata survives the strip, do not open an issue. Report it privately (SECURITY.md). A public issue would show everyone what leaked.
The formats added after Phase 1 (Office, OpenDocument, TIFF, GIF, HEIF/AVIF, SVG, JPEG XL, FLAC, WAV, MP3, Ogg, MP4) were checked mostly against generated files (KNOWN_LIMITATIONS). Files from real cameras, phones and apps are what's missing.
Take a file of your own in one of those formats, run
strypt stripon it, and compareexiftool -a -G1on the input and the output. Report the format, the producing app or device, and field names only as an issue.If identifying metadata survives the strip, do not open an issue. Report it privately (SECURITY.md). A public issue would show everyone what leaked.