added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

liborm85 · liborm85 · commit 8285dd4bb82c · 2026-03-29T11:23:38.000+02:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+- Added server-side method `setLocalAccessPolicy()` for defining a custom access policy for local file
+	Example:
+	```js
+	pdfmake.setLocalAccessPolicy((path) => {
+		// check allowed local file path
+		return path.startsWith("fonts/");
+	});
+	```
 - Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together
 
 ## 0.3.7 - 2026-03-17
diff --git a/examples/absolute.js b/examples/absolute.js
diff --git a/examples/attachments.js b/examples/attachments.js
diff --git a/examples/background.js b/examples/background.js
diff --git a/examples/basics.js b/examples/basics.js
@@ -21,6 +21,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/columns_simple.js b/examples/columns_simple.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/images.js b/examples/images.js
diff --git a/examples/links.js b/examples/links.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/lists.js b/examples/lists.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/margins.js b/examples/margins.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/outlines.js b/examples/outlines.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/pageReference.js b/examples/pageReference.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/pdfa.js b/examples/pdfa.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	version: '1.5', // PDF version
diff --git a/examples/qrCode.js b/examples/qrCode.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var greeting = 'Can you see me';
 var url = 'http://pdfmake.org';
diff --git a/examples/relative.js b/examples/relative.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var left = 20;
 var width = 130;
diff --git a/examples/sections.js b/examples/sections.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	header: function () { return 'default header'; },
diff --git a/examples/security.js b/examples/security.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	//userPassword: '123',
diff --git a/examples/snaking_columns.js b/examples/snaking_columns.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var loremIpsum = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum. ';
 
diff --git a/examples/standardfonts.js b/examples/standardfonts.js
@@ -21,6 +21,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/styling_inlines.js b/examples/styling_inlines.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/styling_named_styles.js b/examples/styling_named_styles.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/styling_named_styles_with_extends.js b/examples/styling_named_styles_with_extends.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/styling_named_styles_with_overrides.js b/examples/styling_named_styles_with_overrides.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/styling_properties.js b/examples/styling_properties.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/svgs.js b/examples/svgs.js
diff --git a/examples/tables.js b/examples/tables.js
@@ -1,6 +1,3 @@
-/*eslint no-unused-vars: ["error", {"args": "none"}]*/
-
-
 var pdfmake = require('../js/index'); // only during development, otherwise use the following line
 //var pdfmake = require('pdfmake');
 
@@ -12,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
@@ -292,6 +295,7 @@ var docDefinition = {
 				]
 			},
 			layout: {
+				// eslint-disable-next-line no-unused-vars
 				fillColor: function (rowIndex, node, columnIndex) {
 					return (rowIndex % 2 === 0) ? '#CCCCCC' : null;
 				}
@@ -381,9 +385,11 @@ var docDefinition = {
 				vLineWidth: function (i, node) {
 					return (i === 0 || i === node.table.widths.length) ? 2 : 1;
 				},
+				// eslint-disable-next-line no-unused-vars
 				hLineColor: function (i, node) {
 					return 'black';
 				},
+				// eslint-disable-next-line no-unused-vars
 				vLineColor: function (i, node) {
 					return 'black';
 				},
diff --git a/examples/textDecorations.js b/examples/textDecorations.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/toc.js b/examples/toc.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/vectors.js b/examples/vectors.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/verticalAlignment.js b/examples/verticalAlignment.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var docDefinition = {
 	content: [
diff --git a/examples/verticalAlignment2.js b/examples/verticalAlignment2.js
diff --git a/examples/watermark.js b/examples/watermark.js
@@ -9,6 +9,12 @@ pdfmake.setUrlAccessPolicy((url) => {
 	return url.startsWith('https://');
 });
 
+// eslint-disable-next-line no-unused-vars
+pdfmake.setLocalAccessPolicy((path) => {
+	// this can be used to restrict access to local file system
+	return true;
+});
+
 
 var lorem = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec id semper massa, nec dapibus mauris. Mauris in mattis nibh. Aenean feugiat volutpat aliquam. Donec sed tellus feugiat, dignissim lectus id, eleifend tortor. Ut at mauris vel dui euismod accumsan. Cras sodales, ante sit amet varius dapibus, dolor neque finibus justo, vel ornare arcu dolor vitae tellus. Aenean faucibus egestas urna in interdum. Mauris convallis dolor a condimentum sagittis. Suspendisse non laoreet nisl. Curabitur sed pharetra ipsum. Curabitur aliquet purus vitae pharetra tincidunt. Cras aliquam tempor justo sit amet euismod. Praesent risus magna, lobortis eget dictum sit amet, tristique vel enim. Duis aliquet, urna maximus sollicitudin lobortis, mi nunc dignissim ligula, et lacinia magna leo non sem.';
 
diff --git a/src/PDFDocument.js b/src/PDFDocument.js
diff --git a/src/Printer.js b/src/Printer.js
diff --git a/src/base.js b/src/base.js
diff --git a/src/index.js b/src/index.js
