The idea behind the PDF Viewer app is to reuse the browser renderer sandbox and hardened font / image handling without granting it internet access or exposing it to untrusted JavaScript or CSS. The app pipes each document from the content provider into a fresh local PDF renderer.
-
-
Deze collectie tonen
-
PDF rendering code is memory safe and dynamic code is disabled. The underlying rendering libraries aren't (yet) memory safe, but they're fairly hardened and there's the native renderer sandbox. The app itself doesn't use permissions and can only access content passed by the user.
Deze collectie tonen -
Eventually, maybe there will be a pure Rust stack that I could run in an isolatedProcess with a solid seccomp-bpf filter, but this is already close to matching that with existing software. I ended up with this approach after looking into Java PDF libraries and being disappointed.
Deze collectie tonen
Einde van gesprek
Nieuw gesprek -
-
-
That’s a big attack vector in offices, good idea. How’s performance?
Bedankt, Twitter gebruikt dit om je tijdlijn te verbeteren. Ongedaan makenOngedaan maken
-
Het laden lijkt wat langer te duren.
Twitter is mogelijk overbelast of ondervindt een tijdelijke onderbreking. Probeer het opnieuw of bekijk de Twitter-status voor meer informatie.