Opened 7 years ago

Closed 6 years ago

#9279 closed defect (fixed)

Facilitate usage of an online PDF viewer for PDF documents

Reported by: cypherpunks Owned by: mikeperry
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords:
Cc: cypherpunks Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

If a user encounters a PDF document on a public Web site, it would be useful if there was an option to view the PDF via an online viewer (one such viewer is at http://view.samurajdata.se/ on the Web, though there are likely others.) Specifically, if a URL indicates a PDF file (i.e. http://example.com/test.pdf?id=3) or the MIME type indicates a PDF file, the user could be prompted about whether to view the PDF in an online viewer instead of the warning about external applications unmasking Tor. Also, if the user right-clicks on a URL link that indicates a PDF file, the context menu could include an option along the lines of "View PDF in Online Viewer" to make things easier.

Child Tickets

Change History (6)

comment:1 Changed 7 years ago by cypherpunks

Cc: cypherpunks added
Priority: normalmajor
Status: newneeds_revision
Type: enhancementdefect

inclusion of PDF Viewer 0.8.298 in TorBrowser-2.4.17-beta-1 by default directly conflicts with security goal of avoiding unmasking via javascript embedded in PDFs!

propose either giving the user a choice or forking

comment:2 Changed 7 years ago by erinn

Owner: changed from erinn to mikeperry
Status: needs_revisionassigned

comment:3 Changed 6 years ago by erinn

Keywords: needs-triage added

comment:4 Changed 6 years ago by erinn

Component: Tor bundles/installationTor Browser

I think we can close this -- Mike?

comment:5 in reply to:  1 Changed 6 years ago by gk

Replying to cypherpunks:

inclusion of PDF Viewer 0.8.298 in TorBrowser-2.4.17-beta-1 by default directly conflicts with security goal of avoiding unmasking via javascript embedded in PDFs!

PDF.js which we ship is not handling JavaScript inside pdf documents (and Mozilla is not planning to do that currently).

comment:6 in reply to:  4 Changed 6 years ago by gk

Keywords: needs-triage removed
Resolution: fixed
Status: assignedclosed

Replying to erinn:

I think we can close this -- Mike?

Yes (although I am obviously not Mike :) ).

Note: See TracTickets for help on using tickets.