Major security issue

There is a major security issue with using the dompdf.php file. The library can be used without it (and you actually aren't using it in your module) so it should be left out. I have informed the author of the original library, but it should be noted in your documentation. The fix is to remove dompdf.php, and just use dompdf_config.inc.php directly for the class (as you are doing.)

Here is a demonstration of the issue:

http://yoursite.com/sites/all/modules/dompdf/dompdf/dompdf.php?input_fil...

makes a nice pdf of the system passwd file (get a list of all users on the system)

?input_file=../../../../default/settings.php does not return the drupal install settings, only because it looks like HTML (the <?) and the lib chokes on it.

This is a super-major issue.