Embed ICC profile in .ps (fixing Ghostscript 9.28 compatibility)

Previously we included the filename, which required Postscript to run with file access enabled. For security, Ghostscript 9.28 enables ``-dSAFER`` and as such, no longer permits access to any file by default. This fix is necessary for compatibility with Ghostscript 9.28. We use ASCII85 for a slightly more compact representation.
2019-09-05 13:17:26 -07:00
parent a2a197ce4c
commit 17ac9d7a9a
3 changed files with 18 additions and 14 deletions
@@ -259,6 +259,7 @@ def generate_pdfa(
                "-dQUIET",
                "-dBATCH",
                "-dNOPAUSE",
+                "-dSAFER",
                "-dCompatibilityLevel=" + str(pdf_version),
                "-sDEVICE=pdfwrite",
                "-dAutoRotatePages=/None",