[cairo-bugs] [Bug 99514] Allow to set the pdf metadata producer

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Tue Jan 24 10:09:45 UTC 2017


https://bugs.freedesktop.org/show_bug.cgi?id=99514

--- Comment #2 from Paolo Borelli <paolo.borelli at gmail.com> ---
There are two reasons why we would like to be able to set this metadata:


1) There are libraries that use cairo internally: one example is libgxps which
is used to convert xps to pdf and internally uses cairo: I think it would be
more accurate to be able to set producer to gxps in that case

2) As Ignacio mentioned, there are cases where it would be better to not
include any metadata at all. This was reported to us as a security concern, if
you have a server application that generates a pdf an attacker can know that
the server is using cairo for that specific function and explot known
vulerabilities

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cairographics.org/archives/cairo-bugs/attachments/20170124/11292090/attachment.html>


More information about the cairo-bugs mailing list