MDL-75044 assignfeedback_editpdf: Add SAFER option to GS command

Adds the SAFER option to the Ghostscript command to limit interaction with IO and OS commands
moodle · Jul 6, 2022 · aebd357 · aebd357
1 parent 3cafb30
commit aebd357
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mod/assign/feedback/editpdf/classes/pdf.php b/mod/assign/feedback/editpdf/classes/pdf.php
@@ -677,7 +677,7 @@ public static function ensure_pdf_file_compatible($tempsrc) {
         $gsexec = \escapeshellarg($CFG->pathtogs);
         $tempdstarg = \escapeshellarg($tempdst);
         $tempsrcarg = \escapeshellarg($tempsrc);
-        $command = "$gsexec -q -sDEVICE=pdfwrite -dBATCH -dNOPAUSE -sOutputFile=$tempdstarg $tempsrcarg";
+        $command = "$gsexec -q -sDEVICE=pdfwrite -dSAFER -dBATCH -dNOPAUSE -sOutputFile=$tempdstarg $tempsrcarg";
         exec($command);
         if (!file_exists($tempdst)) {
             // Something has gone wrong in the conversion.