PDF handling is broken (and dangerous)
The Adobe PDF plugin does not obey the docShell.allowPlugins attribute. It could be because the pdf load creates a new docshell. This requires investigating.
Also, the collaboration IP leak issue discovered by Goldy should probably be reported to Adobe as well, and perhaps a workaround can be introduced by chopping up pdf link requests (though this is likely to get very tricky).
[Automatically added by flyspray2trac: Operating System: All]