I don't want to block PDFs. I want to block JS in PDFs, by default, like I do in web pages. I'd also be happy to hear that the JS runtime in PDFs is run in a

I don't want to block PDFs. I want to block JS in PDFs, by default, like I do in web pages. I'd also be happy to hear that the JS runtime in PDFs is run in a tight document sandbox, operates only on a highly constrained DOM-equivalent, and has zero network or filesystem access. Seems reasonable.