Closed Bug 1667973 Opened 5 years ago Closed 5 years ago

Add a sandbox for evaluating js scripts embedded in PDFs

Categories

(Firefox :: PDF Viewer, enhancement)

enhancement

Tracking

()

RESOLVED FIXED
87 Branch
Tracking Status
firefox83 --- wontfix
firefox87 --- fixed

People

(Reporter: calixte, Assigned: calixte)

References

Details

Attachments

(1 file)

No description provided.
Assignee: nobody → cdenizet
Status: NEW → ASSIGNED

PDF files can embed some js code in order to validate, format, ... the data entered by a user in a PDF form.
So in order to safely execute this js code, we create a Cu.Sandbox with only what we need/want to expose to the scripts.

Blocks: 1684928
Pushed by cdenizet@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/8c8e776cbd29 Add a sandbox to evaluate js embedded in PDF r=bdahl,dveditz,robwu

I updated the patch to remove some js files from the whitelist in browser_all_files_referenced.js and made a try:
https://treeherder.mozilla.org/jobs?repo=try&revision=95a0392b151f07a7141381c30ff4d2321ef96d1d&selectedTaskRun=UJlWcXIvSrKjQqs3ROiNCw.0

Flags: needinfo?(cdenizet)
Pushed by cdenizet@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/a13e286152a8 Add a sandbox to evaluate js embedded in PDF r=bdahl,dveditz,robwu
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → 87 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: