5 ms·
Wkhtmltopdf is slow, inconsistent between platforms and can lead to leakage of sensitive informations on the server (an iframe pointing to file:///etc/passwd).
by hyakosm 6y ago
Wkhtmltopdf is slow, inconsistent between platforms and can lead to leakage of sensitive informations on the server (an iframe pointing to file:///etc/passwd).
Cf. https://news.ycombinator.com/item?id=17566887 https://news.ycombinator.com/item?id=17566887
- cjcampbell 6y agoWon’t debate the other critiques, but one thing I would say for any HTML to PDF solution, is that you need to properly encode or sanitize any dynamic content. As an additional layer of protection, dig into the options for the tool in order to limit the features supported. My recommendation would be to restrict local file support to a pre-determined directory and to disable JavaScript (if possible).