Index: config/policy.xml
--- config/policy.xml.orig
+++ config/policy.xml
@@ -56,6 +56,10 @@
     <policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" />
 -->
 <policymap>
+  <!-- Uncomment to disable the ghostscript "delegate" by default if you
+       want to protect against ghostscript bugs. This is used for ps/pdf. -->
+  <!-- policy domain="delegate" rights="none" pattern="gs" /> -->
+
   <!-- <policy domain="resource" name="temporary-path" value="/tmp"/> -->
   <!-- <policy domain="resource" name="memory" value="2GiB"/> -->
   <!-- <policy domain="resource" name="map" value="4GiB"/> -->