Post

Hey that's pretty cool. If you enjoyed the process, why not. Do you have any info on what type of security risks this poses? Does PDF software run the JavaScript in a container or something like a container?

I personally think the security risk with this is minimal. Chrome runs the JS in PDFs in a very limited version of V8 (without a JIT compiler or WASM support), so the JS interpreter should be pretty secure. The JS APIs are also super limited so there's not a whole lot a bad actor can do.

0 reposts3 likes

No replies yet.