Post

It's also not the only scripting language embedded in PDF. PostScript is a full programming language. FormCalc is less powerful, but still there.

0 reposts3 likes

I'm aware of postscript, but that at least is relevant to the job of document rendering*, and full is doing some heavy lifting in "full programming language". Also, you know, javascript in general.

Plus, given the sheer number of CVEs from PDF renderering engines in the past, the dev responsible just going "let's add a massive extra attack surface for no good reason" is wild.