Okular pdf reader - javascript?

[Shark2847]

Does the Okular pdf viewer both for Linux and for Windows use javascript?
If yes is that as dangerous as the javascript in Adobe acrobat reader?

[jerm]

Yes, Okular uses the QJSEngine provided by the Qt framework for running the JavaScript in a sandboxed environment.

Probably not as it is sandboxed.

Currently, Evince by GNOME doesn’t support javaScript.

There’s a fork of Evince that is ported to GTK4 and Rust called Papers.

If anyone knows of a way to disable JavaScript in Okular (EDIT: doesn’t seem to be possible yet), please share, or if there are more secure pdf viewers/editors out there.

[sha123]

@jerm

or if there are more secure pdf viewers/editors out there.

PDF Reader That Is The Best For User Privacy?

If it is just about reading, simply use a browser. The PDF reader in it is sandboxed, can only use a very limited subset of JS, and has no internet connection. Every local file is treated as its own origin, meaning it is sandboxed from all other files and the host.

[jerm]

I would just eliminate that attack vector by going into about:config search for “pdfjs.enableScripting” and set it to false in Firefox.

[anonfox]

For brave

Disable JavaScript for PDF