Document Review Check

Document Review Check warns editors about stored comments and review marks in PDF and DOCX files uploaded through Drupal Media, without changing the documents.

The result appears next to the file after upload or replacement, before saving the Media item. Checks are enabled separately for each Media type using the core File source. Native Media forms and Media Library are supported.

Features

• Checks PDF review annotations reachable from the current page tree, including hidden or closed annotations.
• Checks stored DOCX comments and supported tracked-change markup, including comments still stored after being resolved.
• Shows a warning when review marks are found, a positive notice when the supported check completes without findings, and a warning when it cannot be completed.
• Inspects files locally, without changing them or displaying comment text or reviewer names.
• Caches complete results using the file content, with size and processing limits.

Requirements

Drupal 10.6 or Drupal 11.4 and later releases within those major versions; PHP 8.3 or later with ZIP, XMLReader, PCRE and zlib. Install with Composer to resolve the PHP PDF libraries. No qpdf, Office installation, external document service or paid API is required. The hosting environment must provide the declared PHP extensions.

Post-installation

Enable the module, edit a Media type that uses the core File source, and enable Check documents for comments and tracked changes. Upload a PDF or DOCX using its native file widget or Media Library. The notice is advisory and saving remains available.

Scope and limitations

This is an editorial aid. It does not remove comments, accept revisions, block publication, control file access, prevent indexing or certify that a document contains no hidden information. Public uploads may already be accessible before the Media item is saved.

Supported storage is local public, private or temporary files, up to 10 MiB each. At most four new inspections run per request. Encrypted, malformed, unsupported or excessive inputs receive an incomplete-check notice. Processing budgets are cooperative and do not guarantee a maximum response time. Legacy .doc files, arbitrary file fields, nested attachments and remote storage are outside the initial scope.

Similar projects and how they are different

• Metadata Sanitizer focuses on removing metadata with ExifTool. Document Review Check reports supported review artifacts and leaves the original file unchanged.
• File Metadata Cleaner provides metadata inspection and cleaning with format processors. This module focuses on advisory PDF/DOCX review notices in native Media upload workflows.
• PDF Sanitizer rewrites PDFs with Ghostscript. Document Review Check inspects supported review structures without rewriting the document.
• MI Preflight describes a broader AI-assisted review and moderation workflow. This module has a narrower scope: local, rule-based PDF/DOCX notices without an external AI service.

Development

The repository includes synthetic regression fixtures, tests for Drupal 10 and 11, and Drupal GitLab CI configuration. AI tools assisted with implementation, testing and documentation. The maintainer reviewed the code and verified its behavior through testing.