Won’t debate the other critiques, but one thing I would say for any HTML to PDF solution, is that you need to properly encode or sanitize any dynamic content. A

Won’t debate the other critiques, but one thing I would say for any HTML to PDF solution, is that you need to properly encode or sanitize any dynamic content. As an additional layer of protection, dig into the options for the tool in order to limit the features supported. My recommendation would be to restrict local file support to a pre-determined directory and to disable JavaScript (if possible).