3 ms·

Just because PDF files can't hijack your domain, doesn't mean they can't spy on you. Unfortunately, there isn't really an open source tool for sanitizing PDF fi

• fsflover 3y ago
  > an open source tool for sanitizing PDF files. Here you go: https://blog.invisiblethings.org/2013/02/21/converting-untrusted-pdfs-into-trusted.html https://blog.invisiblethings.org/2013/02/21/converting-untru...
• m0shen 3y ago
  Anything that converts to PDF/A will strip Javascript
• evgen 3y ago
  Yes there is: Dangerzone (https://dangerzone.rocks/ https://dangerzone.rocks/) Converts incoming documents into a PDF that is a sequence of filtered/optimised images. Dangerzone will also handle office docs, epub, and a lot of different image formats (e.g. SVG and others that can possibly contain active content).
  • egberts1 3y ago
    I am surprised to see the website saying: Sandboxes don't have network access, so if a malicious document can compromise one, it can't phone home With a combo CSS, HTML, JS it is networkable from localhost.
• Karellen 3y ago
  You can always open the PDF in a stand-alone PDF viewer that doesn't support javascript. Like xpdf, mupdf, or atril, or one of possibly many other PDF viewers. (those are the only ones I have installed right now, I think) Or there's poppler-utils which contains a bunch of tools for dealing with PDF files. You might be able to write a script which uses them to extract the contents into a safe format (maybe even a different PDF file?).