New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Indicate why PostScript isn't a scriptable MIME type #100

Open

annevk opened this issue Mar 30, 2019 · 1 comment

Member

annevk commented Mar 30, 2019

From https://www.w3.org/Bugs/Public/show_bug.cgi?id=24891 by Samuel Bronson:

You might want to say a word or two about why PostScript isn't gated by the sniff-scriptable flag, even though it is most certainly scripted.

In fact, it looks like GhostScript doesn't even default to -dSAFER (the flag that turns off the "read/write/rename/delete any file" and "run any command" facilities) yet, though gv(1) does.

Member Author

annevk commented Mar 30, 2019

(The reason it's not is because browsers don't execute such script.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment