Show HN: Webpage to PDF Microservice

thomasfromcdnjs wrote: post #3

Awesome timing. Just started work on a LinkedIn alternative called https://jaresume.com We need a reliable way of turning peoples resumes into PDF's Going to give this a go today or tomorrow. Doing it with https://github.com/GoogleChrome/puppeteer also works quite well

Seems like a neat project.

Re: Show HN: Webpage to PDF Microservice

#5

Post by stevekemp » Sun, Oct 21, 2018, 7:07 AM UTC

I've reported many bugs in projects that turn "URL" to "PDF".

You need to be sure you're limiting the kind of URLs that people can submit. For example ensure that nobody makes a PDF of :

* file:////etc/passwd

* http://169.254.169.254/latest/meta-data/local-hostname

* http://localhost:8080/

I'd say over half of the "PDF-creation" projects posted here have been vulnerable to some/all of those attacks. (I continue to be surprised at how many web-to-pdf services exist. I guess there must be a lot of people paying for them?)

Re: Show HN: Webpage to PDF Microservice

#6

Post by dvh » Sun, Oct 21, 2018, 7:29 AM UTC

thomasfromcdnjs wrote: post #3

Awesome timing. Just started work on a LinkedIn alternative called https://jaresume.com We need a reliable way of turning peoples resumes into PDF's Going to give this a go today or tomorrow. Doing it with https://github.com/GoogleChrome/puppeteer also works quite well

Why not simply press Ctrl+p and print to PDF?

Re: Show HN: Webpage to PDF Microservice

#7

Post by thomasfromcdnjs » Sun, Oct 21, 2018, 8:28 AM UTC

dvh wrote: post #6

thomasfromcdnjs wrote: post #3

Awesome timing. Just started work on a LinkedIn alternative called https://jaresume.com We need a reliable way of turning peoples resumes into PDF's Going to give this a go today or tomorrow. Doing it with https://github.com/GoogleChrome/puppeteer also works quite well

Why not simply press Ctrl+p and print to PDF?

We have tried it in the past, just doesn't work reliably with different html configurations.

Does ctrl+p on this page -> https://jaresume.com/thomas look good for you?

Re: Show HN: Webpage to PDF Microservice

#8

Post by thomasfromcdnjs » Sun, Oct 21, 2018, 8:29 AM UTC

NetOpWibby wrote: post #4

thomasfromcdnjs wrote: post #3

Awesome timing. Just started work on a LinkedIn alternative called https://jaresume.com We need a reliable way of turning peoples resumes into PDF's Going to give this a go today or tomorrow. Doing it with https://github.com/GoogleChrome/puppeteer also works quite well

Seems like a neat project.

Thanks! Feedback always welcomed.

Re: Show HN: Webpage to PDF Microservice

#9

Post by rcfox » Sun, Oct 21, 2018, 8:33 AM UTC

thomasfromcdnjs wrote: post #7

dvh wrote: post #6

Earlier quoted context omitted.

Why not simply press Ctrl+p and print to PDF?

We have tried it in the past, just doesn't work reliably with different html configurations. Does ctrl+p on this page -> https://jaresume.com/thomas look good for you?

For me, when I load the page, I see a resume display and then a split second later it's all replaced with "AN UNEXPECTED ERROR HAS OCCURRED."

Is the error so critical that it must hide your content? Did it accidentally include your AWS keys or something?

Re: Show HN: Webpage to PDF Microservice

#10

Post by thomasfromcdnjs » Sun, Oct 21, 2018, 8:35 AM UTC

rcfox wrote: post #9

thomasfromcdnjs wrote: post #7

Earlier quoted context omitted.

We have tried it in the past, just doesn't work reliably with different html configurations. Does ctrl+p on this page -> https://jaresume.com/thomas look good for you?

For me, when I load the page, I see a resume display and then a split second later it's all replaced with "AN UNEXPECTED ERROR HAS OCCURRED." Is the error so critical that it must hide your content? Did it accidentally include your AWS keys or something?

Sorry about that. I had just introduced a bug for anonymous users. Should work now.