magazine-layout
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalyscripts/html_to_pdf.py
LOWAnomalyLOW
scripts/html_to_pdf.py
The code appears to be a legitimate HTML-to-PDF utility and contains no clear malware or intentional backdoor. Its primary security concern is unsafe rendering of untrusted HTML: JavaScript execution, external resource loading, and explicit local-file access can expose local data or enable network interactions depending on the selected engine and renderer behavior. Restrict input to trusted HTML, disable JavaScript and local-file access where possible, and isolate rendering in a sandbox. The shown code also has a syntax error in the ArgumentParser epilog argument that must be fixed before use.
Confidence: 98%Severity: 52%
Audit Metadata