Re: Why does PDFPIC require unsafe mode -U, but PSPIC doesn't?

2023-07-30 Thread Deri
On Sunday, 30 July 2023 16:43:28 BST Michał Kruszewski wrote: > I do not have much knowledge in this area. > I just came across this interesting blog > https://cromwell-intl.com/open-source/pdf-not-authorized.html that also has > some nice references. > > However, right now I wonder when I should

Re: Why does PDFPIC require unsafe mode -U, but PSPIC doesn't?

2023-07-30 Thread Michał Kruszewski
0, Michał Kruszewski via wrote: > > > Why does PDFPIC require unsafe mode -U, but PSPIC doesn't? > > > troff(1): > -U Operate in unsafe mode, enabling the open, opena, pi, pso, and > sy requests, which are disabled by default because they allow an > untrusted input docum

Re: Why does PDFPIC require unsafe mode -U, but PSPIC doesn't?

2023-07-30 Thread G. Branden Robinson
Hi Michał, At 2023-07-30T08:29:35+, Michał Kruszewski via wrote: > Why does PDFPIC require unsafe mode -U, but PSPIC doesn't? troff(1): -U Operate in unsafe mode, enabling the open, opena, pi, pso, and sy requests, which are disabled by default because they al

Why does PDFPIC require unsafe mode -U, but PSPIC doesn't?

2023-07-30 Thread Michał Kruszewski via
Why does PDFPIC require unsafe mode -U, but PSPIC doesn't? If I understand correctly one can easily execute shell commands from PostScript. Best regards, Michał Kruszewski Sent with [Proton Mail](https://proton.me/) secure email.