docusign / docusign-esign-php-client

The Official Docusign PHP Client Library used to interact with the eSign REST API. Send, sign, and approve documents using this client.
https://www.docusign.com/devcenter
MIT License
196 stars 123 forks source link

GetDocument without writing to file for PCI compliance #56

Open td234 opened 6 years ago

td234 commented 6 years ago

Hi,

This is really just a suggestion for a possible feature that would be nice. When I use getDocument it creates a file in /tmp. This file could potentially have client sensitive information and with most merchant accounts this should not be saved on a hard rive. I would suggest it would be helpful to be able to getDocument and get the document bytes in a string that could then be manipulate as needed, without having to clean up a file in /tmp.

Just a thought as I build my docusignapi scripts.

T

LarryKlugerDS commented 5 years ago

I have created internal ticket DCM-3211 to address this InfoSec issue. Thank you for the report.