3 ms·

> or postscript Ghostscript is written in C and doesn't have a great reputation for security.

• fiddlerwoaroof 6y ago
  The point is to make the document safe: if you’re concerned about the security of Ghostscript, run it in a quarantined VM or similar.
  • tedunangst 6y ago
    Why would you trust a compromised Ghostscript to produce a safe pdf?
    • fiddlerwoaroof 6y ago
      Because the likelihood that I get a PDF designed to exploit a bug in XPDF (or other image viewer) after being converted to PS and back by Ghostscript is relatively low (e.g. this would seem to indicate that I'm being targetted personally, or I have a common setup)? But, in general, I'm not saying "use ghostscript", I'm saying "perhaps roundtripping incoming PDFs through some other file format will produce a PDF that is safer to view than viewing untrusted PDFs directly"