Hacker News new | ask | show | jobs
by a3_nm 3572 days ago
Indeed, set pdfjs.disabled to true. I always do it, because I don't use pdfjs, but there was a pdfjs vulnerability that exposed local files to third-party JS -- so you might as well disable complex stuff that you don't really use.