changeset 85418:26dcc1207f42

(doc-view-ghostscript-options, doc-view-ps->pdf): Add comment about "-dSAFER".
author Reiner Steib <Reiner.Steib@gmx.de>
date Thu, 18 Oct 2007 19:24:30 +0000
parents 88baf5c3a196
children 7e8f1ed0c57c
files lisp/ChangeLog lisp/doc-view.el
diffstat 2 files changed, 13 insertions(+), 4 deletions(-) [+]
line wrap: on
line diff
--- a/lisp/ChangeLog	Thu Oct 18 19:07:49 2007 +0000
+++ b/lisp/ChangeLog	Thu Oct 18 19:24:30 2007 +0000
@@ -1,3 +1,8 @@
+2007-10-18  Reiner Steib  <Reiner.Steib@gmx.de>
+
+	* doc-view.el (doc-view-ghostscript-options, doc-view-ps->pdf):
+	Add comment about "-dSAFER".
+
 2007-10-18  Stefan Monnier  <monnier@iro.umontreal.ca>
 
 	* term/xterm.el: Don't require xt-mouse.
--- a/lisp/doc-view.el	Thu Oct 18 19:07:49 2007 +0000
+++ b/lisp/doc-view.el	Thu Oct 18 19:24:30 2007 +0000
@@ -120,9 +120,10 @@
   :group 'doc-view)
 
 (defcustom doc-view-ghostscript-options
-  '("-dNOPAUSE" "-sDEVICE=png16m" "-dTextAlphaBits=4"
-    "-dBATCH" "-dGraphicsAlphaBits=4" "-dQUIET"
-    "-dSAFER" "-r100")
+  '("-dSAFER" ;; Avoid security problems when rendering files from untrusted
+	      ;; sources.
+    "-dNOPAUSE" "-sDEVICE=png16m" "-dTextAlphaBits=4"
+    "-dBATCH" "-dGraphicsAlphaBits=4" "-dQUIET" "-r100")
   "A list of options to give to ghostscript."
   :type '(sexp)
   :group 'doc-view)
@@ -488,7 +489,10 @@
   (setq doc-view-current-converter-process
 	(start-process "ps->pdf" doc-view-conversion-buffer
 		       doc-view-ps2pdf-program
-		       ps pdf "-dSAFER")
+		       ps pdf
+		       ;; Avoid security problems when rendering files from
+		       ;; untrusted sources.
+		       "-dSAFER")
 	mode-line-process (list (format ":%s" doc-view-current-converter-process)))
   (set-process-sentinel doc-view-current-converter-process
 			'doc-view-ps->pdf-sentinel)