Spring/spring-framework
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Strong recommendation for OpenPDF 1.0.5 instead of iText 2.1.7

Browse Source 
Issue: SPR-16107

(cherry picked from commit b70d400)
This commit is contained in:
Juergen Hoeller
2018-03-07 16:54:04 +01:00
parent 0f5a3e2647
commit 934a995acb
3 changed files with 19 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/docs/asciidoc/web/webmvc-view.adoc
View File

@@ -1831,7 +1831,15 @@ server with the correct content type to (hopefully) enable the client PC to run
spreadsheet or PDF viewer application in response.
In order to use Excel views, you need to add the Apache POI library to your classpath,
and for PDF generation, the common iText 2.1.7 or its fork OpenPDF (e.g. OpenPDF 1.0.4).
and for PDF generation preferably the OpenPDF library.
[NOTE]
====
Use the latest versions of the underlying document generation libraries if possible.
In particular, we strongly recommend OpenPDF (e.g. OpenPDF 1.0.5) instead of the
outdated original iText 2.1.7 since it is actively maintained and fixes an important
vulnerability for untrusted PDF content.
====