Pollmann & Sohn is a 5th generation family owned business located in Kierspe, Germany. It manufactures high-quality fittings and connectors made of steel, stainless steel, nonferrous metals and aluminum, which are used in a wide range of industries. The core assortment is continuously adapted and extended to meet new market requirements. The company is well-known for its constant stock of inventory and fast delivery of products. Competent and experienced sales staff uses various tools to present the product portfolio to customers and prospective buyers. A very important sales tool is the annually published comprehensive product catalog, which features more than 3,000 building fittings and connectors.

Printing automation

Because of the large product variety tremendous work and manpower was required to create, layout and publish the product catalog manually. Changes in product data easily led to inconsistencies in sales and marketing materials.

Pimcore partner Basilicom (Berlin) advised Pollmann to create a Pimcore based web-to-print solution with a set of preconfigured templates, RealObjects PDFreactor as rendering engine and various configurable output formats. Structured data from the Pimcore PIM is the foundation to create the Pollmann catalog nowadays. It is a single-source-publishing approach. The efforts required to produce the catalog decreased significantly. At the same time the catalog quality increased, as processes are now based on the latest, complete product data. With the new system the completeness of data records can be monitored as well.

Read more

About RealObjects

RealObjects (www.realobjects.com), founded in 2000, provides W3C standard-compliant, cross platform software tools for electronic publishing, content authoring and web-to-print.

Its W3C standards-based publishing solution PDFreactor is an industry-recognized flagship product, which is used for server-side conversion of HTML to PDF whenever electronic and typeset-quality print output of business content is required. It is the perfect printing component for web applications, incl. database publishing, web-to-print, PIM, DMS, MDM, DAM, WCMS, VDP etc.

RealObjects products are used by about 3000 corporate customers in over 40 countries, ranging from small businesses to Fortune 500 enterprises, educational institutions as well as government and nonprofit organizations. Several OEM and VAR partners as well as major accounts have deeply integrated RealObjects technology into their toolsets and solutions.

A maintenance release for PDFreactor 10 is now available. This release addresses security vulnerabilities that affect all PDFreactor versions prior to this one.

What are the vulnerabilities?

PDFreactor releases prior to 10.1.10722 are vulnerable to server-side request forgery (SSRF; CVE-2019-12153: by Sean Melia of Aon’s Cyber Solutions) and to attacks using XML external entity processing (XXE; CVE-2019-12154: by Sean Melia of Aon’s Cyber Solutions).

How can these vulnerabilities be exploited?

PDFreactor works under the assumption that all content and data (HTML, CSS, JavaScript etc.) it processes comes from trusted sources. However, this may not always be the case depending on your integration. If attackers are able to inject custom HTML, CSS or JavaScript into the content which is processed by PDFreactor, they may be able to gain access to files on the PDFreactor server or private network resources.

XXE can be exploited by specifying external entities in XML files in such a way that they load private files or network resources which is essentially an SSRF attack. In addition, malicious XML can be used for a denial-of-service (DoS) attack via the so called “billion laughs attack”.

How are these vulnerabilities addressed by this release?

PDFreactor now features security settings which can prevent these exploits:

By default PDFreactor no longer loads resources from the server’s file system. There are certain exceptions to this general security rule, so please refer to the chapter “Security” in the PDFreactor manual for a more detailed explanation. This protects against SSRF. 

When converting XML documents, PDFreactor will no longer automatically load external XML parser resources, such as DTDs, entities or XIncludes. This protects against DoS attacks using XXE.

Please note that depending on the integration and usage scenario, the security settings of PDFreactor need to be configured appropriately. Please refer to the chapter “Security” in the PDFreactor manual. Also, depending on the integration and usage scenario it might be advisable to configure appropriate outbound firewall rules on the server that runs PDFreactor, to prevent access to internal network resources.

This release also includes the following changes:

• JREs packaged with installers or containers have been updated to OpenJDK 12.0.1. (#7686)
• Footnotes are no longer horizontally misaligned in rare cases. (#7588)
• Images with a max-width value no longer lead to content overflowing paragraph. (#7595)
• Documents containing large amounts of SVGs no longer cause non-terminating conversions in rare cases. (#7685)
• JavaScript inserting ‘div’ elements into ‘span’ elements no longer causes exceptions in specific cases. (#7702)
• Certain cases of single-line row flex containers no longer cause non-terminating layouts. (#7699)
• JavaScript processing is no longer aborted when BoxDescription arrays are accessed with invalid indices. (#7692)

• JavaScript processing is no longer aborted when BoxDescription arrays are accessed with invalid indices. (#7692)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

Because of a public holiday in Germany, our office will be closed on Thursday, 30th May 2019. No support requests or license purchases will be processed on this day.

We apologize for any inconvenience this might cause on your side. Thank you for your understanding.

Your RealObjects Support Team

A hotfix release for PDFreactor 10 is now available. This release includes the following changes:

• URLs with custom protocols no longer cause exceptions when using a matching CustomUrlStreamHandler. (#7712)
• Fixed ‘defineProperty’ related issue that broke jQuery setting listeners on ‘window’. (#7711)
• XMLHttpRequest now properly handles encodings, incl. byte order marks (BOM), and document types. (#7718)
• Converting Asset Packages no longer returns an error. (#7721)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

Because of a public holiday, our office will be closed on Monday, 10th June 2019. No support requests or license purchases will be processed on this day.

We apologize for any inconvenience this might cause on your side. Thank you for your understanding.

Your RealObjects Support Team

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

• PDF tagging no longer causes exceptions. (#7604)
• Tables with combinations of empty or missing “col” and “tbody” elements, tables in certain combinations with flex containers and other constructs no longer break conversions. (#7581, #7645, #7680)
• “inline-block”, “inline-table” and “inline-flex” elements no longer overflow lines unnecessarily and no longer erroneously interact with BiDi. (#7565, #7630)
• The dimensions of “inline-block” elements with “min-width” or “min-height” are now determined correctly. (#7632)
• Percentage widths inside cells of auto layout tables are now resolved correctly. (#7719)
• Width of flex containers is no longer incorrect in certain complex scenarios. (#7653)
• Named pages in certain documents no longer cause incorrect page breaks. (#7606)
• The selector specificity of “-ro-nth” in combination with a page group is now higher than that of just a page group. (#7640)
• The “extensible” JavaScript property no longer erroneously disallows the modification of existing properties in strict mode. This issue broke support for the library “React”. (#7636)
• Low level style sheet manipulation from JavaScript now works correctly for more edge cases. (#7629)
• Improved exception handling during JavaScript debugging.
• The dimensions for “-ro-link-area: block” and similar styles as well as “offsetWidth” and similar element properties are now correctly determined in all situations. (#7664, #7681)
• Large data URIs in “src” attributes are no longer erroneously blocked. (#7723)
• The pages counter no longer has incorrect values in certain documents. (#7603, #7722)
• Corrected footnote positioning in documents using “-ro-scale-content”. (#7591)
• Footnote markers inside the text of multi-column content no longer disappear in some cases. (#7575)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

Because of a public holiday in Germany, our office will be closed on Thursday, 20th June 2019. No support requests or license purchases will be processed on this day.

We apologize for any inconvenience this might cause on your side. Thank you for your understanding.

Your RealObjects Support Team

A hotfix release for PDFreactor 10 is now available. This release includes the following changes:

• Synthetic italic is applied again. (#7532)
• Empty inline elements no longer prevent their parents from collapsing through. (#7531)
• The dimensions of multi-page collapsed tables with varying border widths are now determined correctly. (#7110)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

• Introduced the proprietary CSS property ‘-ro-source-area’ which specifies the PDF page box used when embedding PDF documents as images. (#7713)
• When using PDF documents as images some edge cases no longer cause incorrect results. (#7705)
• The ‘location’ object in JavaScript is now correctly converted to string, solving a MathJax issue. (#7730)
• MathJax as well as some complex SVGs no longer fail in some cases when the base URL differs from the document URL or when there is neither a base URL nor a document URL. (#7744)
• User style sheets with BOMs are now processed correctly in all cases. (#7076)
• Certain complex flex layouts no longer cause exceptions. (#7652)
• Block images with generated ‘::before’ content no longer break conversions. (#7738)
• Named pages are now processed correctly when there are positioned elements at the beginning. (#7724)
• The property ‘-ro-pdf-attachment-url’ now works correctly, for both string and URL values, when CSS validation is enabled. (#7597)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

• The CSS properties “overflow-wrap” and “word-wrap” now support the value “anywhere” which has the same effect as “break-word” but also influences layouts that depend on the minimum sizes of elements. (#7620)
• Solved various “MathJax” related issues, by correcting the insertion of block elements into inline parents. (#7541, #7739, #7749, #7750, #7751)
• Solved JavaScript SyntaxErrors when using “Vue.js”, by no longer passing ‘strict’ mode into “new Function()” executions. (#6559)
• Added support for “Chart.js” 2.0, by correcting “toString” edge cases. (#5969)
• Using “MathJax” in certain complex layouts no longer causes non-terminating exceptions. (#7770)
• Corrected certain edge cases when references to JavaScript functions are called. (#7767)
• Color space conversion to CMYK now works correctly for all image types. (#7745)
• Certain complex layouts no longer cause exceptions. (#7752, #7763, #7771, #7772)
• PDFreactor Web Service server parameters can now properly be set as environment variables. (#7778)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

• SVG elements with the same color for stroke and fill are now optimized to avoid visual issues in PDF viewers. Most noticeably MathJax equations no longer look too bold in PDFs, especially when zoomed out. (#7740)
• Some combinations of “cHRM” and “gAMA” headers in PNG images embedded into PDFs no longer cause incorrect visual results. (#7796)
• Certain cases of complex tables no longer cause exceptions. (#7786, #7787)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

Because of a public holiday in the State of Saarland, our office will be closed on Thursday, 15th August. No support requests or license purchases will be processed on this day.

We apologize for any inconvenience this might cause on your side. Thank you for your understanding.

Your RealObjects Support Team

According to Directive 2004/39/EC of 21.04.2004, released by the European Parliament and the Council regarding markets for financial instruments (MiFID, abbreviation for Markets in Financial Instruments Directive) banks are obliged to archive advertising content presented to their customers for certain types of products for a period of five years and to submit this in the event of legal disputes. This also applies to advertising information shown online via the Internet branches of the Sparkasse savings banks. Realization of archiving that conforms to the directive (conforming to PDF/A) presents substantial challenges to Finanz Informatik as the operator of the Internet branch.

The use of RealObjects PDFreactor allowed an approach to be realized for the Internet branch that guaranteed the fulfillment of statutory archiving requirements (PDF/A compliant) that saved a lot of expenditure compared to the alternative approaches that were investigated and that would not have been easily realizable with other PDF libraries.

Please also read the related case study.

About Finanz Informatik

Finanz Informatik, headquartered in Frankfurt am Main, is the central IT service provider of Sparkasse Finance Group. Its customers include 384 Sparkasse savings banks, six state banks, DekaBank, eight state Landesbausparkasse state building societies, public sector insurers and further companies within the Sparkasse Finance Group. Finanz Informatik offers a complete IT service – from application development through infrastructure and data centre operations to consultancy, training and support.

About RealObjects

RealObjects (www.realobjects.com), founded in 2000, provides W3C standard-compliant, cross platform software tools for electronic publishing, content authoring and web-to-print.

Its W3C standards-based publishing solution PDFreactor is an industry-recognized flagship product, which is used for server-side conversion of HTML to PDF whenever electronic and typeset-quality print output of business content is required. It is the perfect printing component for web applications, incl. database publishing, web-to-print, PIM, DMS, MDM, DAM, WCMS, VDP etc.

RealObjects tools have been used by about 3000 corporate customers in over 40 countries, ranging from small businesses to Fortune 500 enterprises, educational institutions as well as government and non-profit organizations. Several major accounts have deeply integrated RealObjects technology into their toolsets and solutions. A network of strategic business alliances, resellers and OEM partners/customers has been established over the years.

Contact:

Michael Jung
RealObjects, Managing Director
michael.jung@realobjects.com
Tel. +49 681 985 790

Personal electronic document storage is an important topic for the customers of various Raiffeisen systems. In the e-banking system „Mein ELBA“ Raiffeisen therefore aims to offer its customers the simple and fast generation of PDFs in various templates (turnover lists, advisor mailbox etc.). The interconnection within all templates in the system means that it is also important that separate implementation and layout of the PDF document is not necessary beyond the web templates, which have also be designed both professionally and responsively. Ideally the PDF should be generated from the HTML and CSS shown in the web browser.

The use of RealObjects PDFreactor allowed Raiffeisen to establish a generically usable „HTML to PDF as a service“ function in its systems without requiring a lot of time. Raiffeisen Software GmbH chose a PDFreactor „Corporate Application License“ that also enables unlimited use of any sub applications such as „Mein ELBA“ (https://banking.raiffeisen.at/) as part of the application „Digitale Regionalbank“.

Please also read the related case study.

About Raiffeisen Software GmbH

Raiffeisen Software GmbH is the software house of Raiffeisen Bankengruppe Österreich and one of the largest IT service providers in the country. For over 50 years Raiffeisen Software GmbH has been creating IT solutions that provide innovation, increased efficiency and added value to customers. Raiffeisen Software GmbH supports the daily business of Raiffeisenbanks in Austria with user-friendly IT systems. The corresponding IT solutions set standards in the financial sector.

About RealObjects

RealObjects (www.realobjects.com), founded in 2000, provides W3C standard-compliant, cross platform software tools for electronic publishing, content authoring and web-to-print.

Its W3C standards-based publishing solution PDFreactor is an industry-recognized flagship product, which is used for server-side conversion of HTML to PDF whenever electronic and typeset-quality print output of business content is required. It is the perfect printing component for web applications, incl. database publishing, web-to-print, PIM, DMS, MDM, DAM, WCMS, VDP etc.

RealObjects tools have been used by about 3000 corporate customers in over 40 countries, ranging from small businesses to Fortune 500 enterprises, educational institutions as well as government and non-profit organizations. Several major accounts have deeply integrated RealObjects technology into their toolsets and solutions. A network of strategic business alliances, resellers and OEM partners/customers has been established over the years.

Contact:

Michael Jung
RealObjects, Managing Director
michael.jung@realobjects.com
Tel. +49 681 985 790

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

• Color space conversion no longer fails for certain PNG images. (#7819)
• Image recompression and resampling no longer fail for images with large dimensions. (#7817)
• Elements with non-visible overflow and auto height no longer prevent their content from creating named pages. (#7646, #7694)
• The API property “JavaScriptSettings.maxTasksWithoutDomChange” is applied correctly again. (#7841)
• Resources from file URLs containing fragments no longer cause exceptions. (#7812)
• Data URIs containing consecutive white-spaces are processed correctly again. (#7800)
• Footnotes created by the content of flex items are now displayed correctly. (#7840)

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

Because of a public holiday, our office will be closed on Friday, 1st November. No support requests or license purchases will be processed in this period.

We apologize for any inconvenience this might cause on your side. Thank you for your understanding.

Your RealObjects Support Team

Pollmann & Sohn is a 5th generation family owned business located in Kierspe, Germany. It manufactures high-quality fittings and connectors made of steel, stainless steel, nonferrous metals and aluminum, which are used in a wide range of industries. The core assortment is continuously adapted and extended to meet new market requirements. The company is well-known for its constant stock of inventory and fast delivery of products. Competent and experienced sales staff uses various tools to present the product portfolio to customers and prospective buyers. A very important sales tool is the annually published comprehensive product catalog, which features more than 3,000 building fittings and connectors.

Printing automation

Because of the large product variety tremendous work and manpower was required to create, layout and publish the product catalog manually. Changes in product data easily led to inconsistencies in sales and marketing materials.

Pimcore partner Basilicom (Berlin) advised Pollmann to create a Pimcore based web-to-print solution with a set of preconfigured templates, RealObjects PDFreactor as rendering engine and various configurable output formats. Structured data from the Pimcore PIM is the foundation to create the Pollmann catalog nowadays. It is a single-source-publishing approach. The efforts required to produce the catalog decreased significantly. At the same time the catalog quality increased, as processes are now based on the latest, complete product data. With the new system the completeness of data records can be monitored as well.

Read more

About RealObjects

RealObjects (www.realobjects.com), founded in 2000, provides W3C standard-compliant, cross platform software tools for electronic publishing, content authoring and web-to-print.

Its W3C standards-based publishing solution PDFreactor is an industry-recognized flagship product, which is used for server-side conversion of HTML to PDF whenever electronic and typeset-quality print output of business content is required. It is the perfect printing component for web applications, incl. database publishing, web-to-print, PIM, DMS, MDM, DAM, WCMS, VDP etc.

RealObjects products are used by about 3000 corporate customers in over 40 countries, ranging from small businesses to Fortune 500 enterprises, educational institutions as well as government and nonprofit organizations. Several OEM and VAR partners as well as major accounts have deeply integrated RealObjects technology into their toolsets and solutions.

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

A maintenance release for PDFreactor 10 is now available. This release includes the following changes:

For a full list of changes and corrections see the changelog.

Important release notes und upgrading information can be found in the readme.

The PDFreactor 10 installation packages are available for download in the download area.

Because of the holiday season, our office will be closed from Monday, 23rd December 2019 to Wednesday, 1st January 2020. No support requests or license purchases will be processed in this period.

We apologize for any inconvenience this might cause on your side. Thank you for your understanding.

The entire RealObjects Team wishes you, your family and friends

Happy Holidays, Merry Christmas and Happy New Year!