funsec mailing list archives
Re: Adobe to Implement Reader Sandbox
From: Larry Seltzer <larry () larryseltzer com>
Date: Tue, 20 Jul 2010 23:09:11 -0400
I have yet to see any legitimate use for javashit in pdfs.
PDFs are used for forms in a lot of enterprise apps and Javascript is used for the forms processing. This is certainly a legitimate use. Is there a legit use for javascript in HTML? The problem is that their attack surface grew too fast. They went feature-happy. LJS _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Performing Brahams with Vuvuzelas Gadi Evron (Jul 01)
