News for hackers. Stuff that matters.

A comment on Embedded PDF viewer in Firefox 81 supports filling forms. Parent comment

Re:Embedded PDF viewer in Firefox 81 supports filling forms by axelf4 on Tuesday September 22, 2020 @11:02AM (#24555242)
> It's bloat which increases the browser's attack surface.

AFAICT PDF.js is just another JavaScript application and thus as sandboxed as any other website.

[ Parent | on HN ]
Re:Embedded PDF viewer in Firefox 81 supports filling forms by est31 on Tuesday September 22, 2020 @11:31AM (#24555664)
It's a js application and thus less exploitable than your average C application with tons of unsound code, but IIRC it belongs to the class of "privileged js" layer that Firefox has, so has special rights that usual website js doesn't have.
[ Parent | on HN ]