"Content Copying" Document Restriction is not effective
Categories
(Firefox :: PDF Viewer, defect)
Tracking
()
People
(Reporter: t.matsuu, Unassigned)
References
()
Details
I haven't fully tested all document restrictions, but the "content copy" restriction doesn't work in pdf.js.
Step to Reproduce:
- Generate a PDF file which has "Content Copy: Disallowed" document restriction
- Open the PDF file in Firefox
- Select text and then Copy and Paste
Actual Result:
The selected text is copied and pasted.
Expected Result:
Text cannot be copied.
|
||
Comment 1•4 years ago
|
||
Those Document Security restrictions are ignored by default.
If you, the user, want to respect some permissions (like not being able to copy), you can toggle this preference in about:config from false to true:
pdfjs.enablePermissions
After toggling the preference, reload any open PDF to see the change.
Example: https://www.jeffersonscher.com/res/protected.pdf
This also can be set by Enterprise Policy if you want to enforce that within your organization. See: bug 792816
|
Reporter | |
Comment 2•4 years ago
|
||
(In reply to jscher2000 from comment #1)
Those Document Security restrictions are ignored by default.
Oh, it breaks a trusting relationship with PDF creators.
This choice may lead all Firefox users blocked from their websites.
pdfjs.enablePermissions should set to true and be non-configurable from users.
|
||
Updated•4 years ago
|
|
|
||
Comment 4•4 years ago
|
||
(In reply to Takanori MATSUURA from comment #2)
(In reply to jscher2000 from comment #1)
Those Document Security restrictions are ignored by default.
Oh, it breaks a trusting relationship with PDF creators.
This choice may lead all Firefox users blocked from their websites.
pdfjs.enablePermissionsshould set totrueand be non-configurable from users.
I think it was decided a long time ago not to enforce the restrictions by default. I don't know whether it has affected whether sites allow Firefox users to view PDFs. I notice some sites use their own custom viewer to better control the experience. Perhaps that is a partial response, or perhaps sites accept that these flags are enforced on an honor system and are not any kind of real security.
Description
•