3 ms·

Is there any security risk to use as project with an embedded .wasm binary? Is there a build process for this that we can reproduce, or is there a way to bring

Is there any security risk to use as project with an embedded .wasm binary? Is there a build process for this that we can reproduce, or is there a way to bring our own if it's a generally available asset? Referring to this file: https://github.com/embedpdf/embed-pdf-viewer/blob/main/packages/pdfium/src/pdfium.wasm https://github.com/embedpdf/embed-pdf-viewer/blob/main/packa...

bobsingor 1y ago
Good question. You can fully reproduce the build. We have a Dockerfile here that handles the process: https://github.com/embedpdf/embed-pdf-viewer/blob/main/packages/pdfium/Dockerfile https://github.com/embedpdf/embed-pdf-viewer/blob/main/packa... Also, if you look in the package.json, there is a wasm script set up. Running pnpm run wasm will build the .wasm file inside Docker, so you get a clean, repeatable build.
bobsingor 1y ago
Quick update: I just added a new option where you can set a custom wasmUrl when initializing the snippet. This way you can host your own .wasm build if you want to be 100% sure it hasn’t been modified. Here’s the commit: https://github.com/embedpdf/embed-pdf-viewer/commit/ff928377988f422d7b637a22ae35f18faadf0108 https://github.com/embedpdf/embed-pdf-viewer/commit/ff928377... Thanks again for raising the point — really good feedback!