JavaScripts in PDFs as a security risk

JavaScripts in PDFs as a security risk

Before you begin

Acrobat offers a new, more intuitive product experience. If you see a different product interface select help for your current experience.

Note

For a full list of articles about security, see Overview of security in Acrobat and PDF content.

Acrobat and Acrobat Reader let you configure application settings to control how JavaScript runs to ensure it aligns with your security requirements. It limits access to JavaScript APIs and isolates workflows that do not require JavaScript APIs.

  1. 1. In Acrobat, open the Preferences window by pressing Ctrl + K (Windows) or Cmd + K (macOS).

  2. 2. From the Categories pane, select JavaScript.

  3. 3. In the JavaScript Security panel, set options to manage JavaScript: as needed.

    Enable Acrobat JavaScript Uncheck to disable JavaScript completely or restrict JavaScript through APIs.

    Enable Menu Items JavaScript Execution Privileges Enables executing JavaScript by clicking menu items. When off, privileged JavaScript calls can be executed through the menu. Executing non-privileged JavaScript calls through menu items is not blocked whether this box is checked or not.

    Enable Global Object Security Policy Allows JavaScript globally through APIs, or trusts specific documents containing JavaScripts.

Alternatively, you can modify your system registry settings to manage JavaScript execution.

For details, see the Application Security Guide.

More like this

    • Related Articles

    • Security warnings when a PDF opens

      You sometimes see a warning when you open a PDF. The warning comes in many forms (three are shown below). Security warnings What does the warning mean? The warning is asking whether you trust the people who sent you the PDF or the site in which the ...

    • Setting 3D views in PDFs

      Before you begin We're rolling out a new, more intuitive product experience. If the screen shown here doesn’t match your product interface, select help for the new experience. In the current experience, the tools appear on the right side of the ...

    • Overview of security in Acrobat PDFs

      Security applies in two general contexts: application (software) security and content security. Application security involves customizing security features to protect Acrobat and Reader against vulnerabilities, malicious attacks, and other risks. ...

    • Enhanced security setting for PDFs

      PDFs have evolved from static pages to complex documents with features such as interactive forms, multimedia content, scripting, and other capabilities. These features leave PDFs vulnerable to malicious scripts or actions that can damage your ...

    • Choosing a security method for PDFs

      By adding security to documents, you can limit viewing, editing, printing, and other options to only the specified users. Choosing which type of security to use Security features range from relatively simple measures to sophisticated systems adopted ...