Re:Launch HN: Onedoc (YC W24) – A better way to create PDFs
by AugusteLef on Tuesday March 12, 2024 @12:02AM
(#39676069)
True. Security is a significant concern, and in our discussions with businesses, we realised that most of them do not want any kind of data leaving their own systems. This is especially true in the biotech/healthcare industry, but also in legal and banking. That's why we're considering an on-premises solution for the future (as we're focusing on B2B). However, I assume most people were talking about personal use cases or non-sensitive documents, hence the fact that no one mentioned SSRF (yet ;)).
Re:Launch HN: Onedoc (YC W24) – A better way to create PDFs
by throw03172019 on Tuesday March 12, 2024 @01:17AM
(#39676422)
Also big fan of browserless. Do you run it yourself? We run the browserless docker containers on prem.
Most HTML-to-PDF are deeply insecure and I am more than happy to pay someone else to deal with isolation and security. Report generators are often used to leak cloud secrets via the metadata API.