The PDF viewer app in GrapheneOS uses an isolated WebView that streams the pdf data into pdf.js so it can load without file access permissions. This WebView has additional containment by blocking dynamic code with a content security policy.
The PDF viewer app in GrapheneOS uses an isolated WebView that streams the pdf data into pdf.js so it can load without file access permissions. This WebView has additional containment by blocking dynamic code with a content security policy.
No replies yet.