6 ms·
They still treat PDF files as “safe” to automatically open when downloaded so nope.
by eyelidlessness 6y ago
They still treat PDF files as “safe” to automatically open when downloaded so nope.
- salsadip 6y agoWhat’s dangerous in a PDF besides JS which is not executed in macos Preview.app?
- eyelidlessness 6y agoPDF has had a zillion vulnerabilities over the years. And Apple doesn’t guarantee in Safari that Preview.app is the default handler, so that expands the scope of potential vulnerabilities to Acrobat, which is notorious for its history of vulnerabilities.