Skip to main content

Module javascript_policy

Module javascript_policy 

Source
Expand description

Central JavaScript handling policy for PDF/XFA hardening paths.

Enums§

JavaScriptEntryPoint
JavaScriptEntryPoint.
JavaScriptPolicy
JavaScript may be parsed and inspected so hardening code can locate and remove active content, but this crate must never execute document-supplied JavaScript. PDF/XFA inputs are untrusted and JavaScript actions can reach viewer APIs, network/file operations, and mutable form state. Keeping parse, execution, and flatten behavior as explicit policy values prevents hidden no-op fallbacks from becoming accidental execution paths in future work.

Functions§

catalog_has_javascript_open_action
catalog_has_javascript_open_action.
dict_has_javascript_additional_actions
dict_has_javascript_additional_actions.
dict_has_javascript_field_action
dict_has_javascript_field_action.
execution_denied_message
execution_denied_message.
execution_policy
Returns the JavaScript execution policy for a given entry point: always JavaScriptPolicy::DenyExecution.
flatten_policy
Returns the flatten-time JavaScript policy for a given entry point: always JavaScriptPolicy::StripOnFlatten.
is_javascript_action_dict
is_javascript_action_dict.
parse_policy
Returns the JavaScript parse policy: JavaScriptPolicy::AllowParse.
reject_execution
Construct an XfaError that signals a denied JavaScript execution request.
strip_javascript_for_flatten
Strip JavaScript-bearing PDF actions from XFA flattened output.
template_mentions_javascript
template_mentions_javascript.