JavaScripts in PDFs as a security risk

Note:

For a full list of articles about security, see Overview of security in Acrobat and PDF content.

Acrobat and Acrobat Reader let you adjust application behavior so that JavaScript executes within your desired level of security. This helps restrict application access to JavaScript APIs and isolates workflows that do not require JavaScript APIs.

  1. In Acrobat, open the Preferences window by pressing Ctrl + K (Windows) or Cmd + K (macOS).

  2. From the Categories on the left, select JavaScript.

  3. In the JavaScript Security panel, set options to manage JavaScript: as needed.

    Enable Acrobat JavaScript

    Uncheck to disable JavaScript completely or restrict JavaScript through APIs.

    Enable Menu Items JavaScript Execution Privileges

    Enables executing JavaScript by clicking menu items. When off, privileged JavaScript calls can be executed through the menu. Executing non-privileged JavaScript calls through menu items is not blocked whether this box is checked or not.

    Enable Global Object Security Policy

    Allows JavaScript globally through APIs, or trusts specific documents containing JavaScripts.

Alternatively, you can modify your system registry settings to manage JavaScript execution.

For details, see the Application Security Guide at www.adobe.com/go/learn_acr_appsecurity_en.

More like this

Get help faster and easier

New user?