Russ > I have been asked to install iText on a shared server, but it seems that it > could potentially be unsafe to do so as I would imagine iText has the > ability to read/file files anywhere on the server seeing as java components > are not affected by a security sandbox.
I don't think iText itself does any file access. If your customers aren't allowed to use CFOBJECT or CreateObject, then they won't be able to do much with it. If they are, then they will have access to the java.io classes anyway. It's those classes that do the actual file reading & writing - iText just adds functionality which understands how certain types of files are structured. Nick ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:216214 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
