danfickle / openhtmltopdf

An HTML to PDF library for the JVM. Based on Flying Saucer and Apache PDF-BOX 2. With SVG image support. Now also with accessible PDF support (WCAG, Section 508, PDF/UA)!
https://danfickle.github.io/pdf-templates/index.html
Other
1.91k stars 356 forks source link

Looking For Security Tips #947

Open SharkFourSix opened 12 months ago

SharkFourSix commented 12 months ago

Looking for security tips on the following:

  1. If JavaScript is executable, how to disable it completely.

  2. How to disable or control external resources request; i.e URLs specified in tags such as IMG, CSS, SCRIPT, etc.

Any takes?