4 ms·
> PDF.js viewer now included in Thunderbird Doesn't this unnecessarily increase the attack surface?
by qwertox 5y ago
> PDF.js viewer now included in Thunderbird
Doesn't this unnecessarily increase the attack surface?
- janikvonrotz 5y agoI assume it also used by every browser.
- lucideer 5y agoOf this 1 individual application, yes. But it's a tradeoff against the user's attack surface of using multiple apps. PDF.js is run in a secure sandbox so has no direct filesystem/OS access, and is very actively maintained (e.g. for Firefox), so it's not unreasonable that it may leave you much less exposed than launching an external app would.