Chrome's PDF viewer seems to be implemented in native code. But it probably benefits from the sandboxing that Chrome does. I would say Firefox is the safest he

Chrome's PDF viewer seems to be implemented in native code. But it probably benefits from the sandboxing that Chrome does. I would say Firefox is the safest here, because its built-in PDF viewer is written in JS, although Firefox's sandboxing is not as strong as Chrome's.