[Brybry]

Do you know if NoScript with javascript disabled but iframes allowed and pdfjs enabled would have stopped it?

A vulnerability test would be really nice but I understand why it doesn't exist yet.

[fukusa]

It would have stopped it. Js has to be active for the exploit script to run.