Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's definitely possible (and advisable) in GhostScript - the article itself touches on this in the end, when it mentions you need to use -dNOSAFER for the example to work in ps2pdf.

https://ghostscript.com/doc/9.20/Use.htm#Options

The SAFER and NOSAFER options are described here, and SAFER is essentially a sandbox. So, the problem described isn't so much a problem with PostScript, as a problem with anybody that writes an app that fails to invoke their PostScript interpreter appropriately. Apparently some unnamed web application had this problem, but ps2pdf does not.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: