4 ms·
I thought one of the safety features of some pdf readers was the ability to disable javascript. How does that work here if this is entirely implemented in java
by DASD 14y ago
I thought one of the safety features of some pdf readers was the ability to disable javascript. How does that work here if this is entirely implemented in javascript? Disregard if I'm not understanding this correctly.
- rcthompson 14y agoI believe the security feature is the ability to disable Javascript code that is included within the pdf file. A pdf reader implemented in Javascript is perfectly capable of doing that.
- stock_toaster 14y agoNot only that, but being able to render via js would (and thus avoid calling out to any plugin code) would be able to take advantage of sandboxing too I imagine.
- pifflesnort 14y agoHow do you evaluate the PDF's JavaScript in an interpreter that is distinct from the renderer's?
- meaty 14y agoDifferent layers of abstraction. JavaScript embedded in a PDF probably turns up as a string after being parsed. It doesn't necessarily get eval'ed. It's turtles all the way down, until you say no.
- DASD 14y agoLet's hope there is the option to say no otherwise this couldn't be considered a general purpose viewer by some.