smokephil/paperless-ngx
1
0
Fork 0
mirror of https://github.com/paperless-ngx/paperless-ngx.git synced 2025-12-07 15:25:41 +01:00
Code Issues Projects Releases Packages Wiki Activity

Security: Correctly disable eval in pdfjs (#6702)

Browse source
This commit is contained in:
shamoon 2024-05-13 08:44:35 -07:00 • committed by GitHub
parent ac666df4ce
commit 7983487430
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src-ui/src/app/components/common/pdf-viewer/pdf-viewer.component.ts
View file

@ -35,7 +35,6 @@ import type {
import { PDFSinglePageViewer } from 'pdfjs-dist/web/pdf_viewer' import { PDFSinglePageViewer } from 'pdfjs-dist/web/pdf_viewer'
PDFJS['verbosity'] = PDFJS.VerbosityLevel.ERRORS PDFJS['verbosity'] = PDFJS.VerbosityLevel.ERRORS
PDFJS['isEvalSupported'] = false
export enum RenderTextMode { export enum RenderTextMode {
DISABLED, DISABLED,
@ -440,6 +439,7 @@ export class PdfViewerComponent
cMapPacked: true, cMapPacked: true,
enableXfa: true, enableXfa: true,
} }
params.isEvalSupported = false
if (srcType === 'string') { if (srcType === 'string') {
params.url = this.src params.url = this.src