Doesn't this same liability exist for PostScript documents? IIrc, the power of PostScript as a language offers the potential to embed various nasty things inside PS documents. If so ... what's the typical way to defuse PS bombs? Klaus