marcbachmann / node-html-pdf

This repo isn't maintained anymore as phantomjs got dreprecated a long time ago. Please migrate to headless chrome/puppeteer.
MIT License
3.56k stars 545 forks source link

Prevent local file access by default #616

Closed marcbachmann closed 3 years ago

marcbachmann commented 3 years ago

Changelog

💥 Breaking Change

Prevent local file access by default to fix a security issue. Please provide the localUrlAccess: true option if you want to keep the old behavior but keep your system vulnerable to local file access.

Not sure this module is even usable without installing phantomjs manually. On linux you might need to download the executable.

The tests are running locally on macos. I'll publish this as version 3.