Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The primary downside is the remarkable dangerousness of much of the JavaScript that is found bound to the HTML.

Are you aware that PDF format has also featured JavaScript support (and related vulnerabilities) for a long time now [1]?

[1] https://us-cert.cisa.gov/ncas/alerts/TA09-133B



yes, although I forgot about it, never seem to have a use for it myself.


The finance industry loves it. Their bureaucracy ran on documents, and it still does, but now those documents can run code.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: