Skip to content

Commit

Permalink
Added documentation for security restriction added in html2pdf operation
Browse files Browse the repository at this point in the history
  • Loading branch information
Amit Singh committed Jul 16, 2024
1 parent 8c65253 commit e17481a
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 1 deletion.
4 changes: 4 additions & 0 deletions src/pages/overview/pdf-services-api/howtos/create-pdf.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,10 @@ following formats:
If a Microsoft Word/PowerPoint input file has an embedded TrueType font, the output pdf will also contain the same embedded TrueType font.
For more information, refer [Benefits of embedding custom fonts](https://support.microsoft.com/en-us/office/benefits-of-embedding-custom-fonts-cb3982aa-ea76-4323-b008-86670f222dbc#OfficeVersion=Windows).

<InlineAlert slots="text"/>

We are implementing a new security validation that will impose restrictions on the conversion requests in which:<br/>1. URL Scheme is not HTTPs.<br/>2. Hostname resolves to non-routable IP Address (Private/Local/Link local, etc). This will also include cases which will include redirects with non-routable IP addresses.

Please refer the [API usage guide](../api-usage.md) to understand how to use our APIs.

<CodeBlock slots="heading, code" repeat="5" languages="Java, .NET, Node JS, Python, REST API" />
Expand Down
2 changes: 1 addition & 1 deletion src/pages/resources/openapi.json
Original file line number Diff line number Diff line change
Expand Up @@ -2079,7 +2079,7 @@
"Html to PDF"
],
"summary": "Convert HTML Resources to a PDF File",
"description": "Creates PDFs from static/dynamic HTML or HTML(with inline CSS) or just a URL. It's a common scenario for enterprise to provide end users with a HTML template with form fields. In case of dynamic HTML this API allows you to capture the users unique data entries and then save it as PDF. Collected data is stored in a JSON file, and the source HTML file must include \\<script src='./json.js' type='text/javascript'>\\</script>. You can also provide the URL of the HTML page in inputUrl parameter. <b>However, creating PDF from URL is not supported in External Storage flow.</b>",
"description": "Creates PDFs from static/dynamic HTML or HTML(with inline CSS) or just a URL. It's a common scenario for enterprise to provide end users with a HTML template with form fields. In case of dynamic HTML this API allows you to capture the users unique data entries and then save it as PDF. Collected data is stored in a JSON file, and the source HTML file must include \\<script src='./json.js' type='text/javascript'>\\</script>. You can also provide the URL of the HTML page in inputUrl parameter. <b>However, creating PDF from URL is not supported in External Storage flow.</b><br><b>We do not support the following conditions:</b><br>1. URL Scheme is not HTTPs.<br>2. Hostname resolves to non-routable IP Address (Private/Local/Link local, etc).This will also include cases which will include redirects with non-routable IP addresses.<br>",
"operationId": "pdfoperations.htmltopdf",
"parameters": [
{
Expand Down

0 comments on commit e17481a

Please sign in to comment.