Page 1 of 1

exclude PDFs from blocking

Posted: Sun Aug 23, 2009 3:42 pm
by user
how can I exclude PDFs from generally beeing blocked on sites that are not on the positive list ?

what dangers come from PDFs ?

best regards

Stefan

Re: exclude PDFs from blocking

Posted: Sun Aug 23, 2009 3:58 pm
by Alan Baxter
user wrote:what dangers come from PDFs ?
Ongoing vulnerabilities in PDF readers and plugins, both unpatched and 0-day. Adobe Reader and Acrobat get the most publicity, but other PDF readers and plugins are vulnerable as well.
http://hackademix.net/2009/02/25/upgrad ... robat-now/

Re: exclude PDFs from blocking

Posted: Sun Aug 23, 2009 6:09 pm
by Grumpy Old Lady
From the features page
http://noscript.net/features#contentblocking
You can configure some exception to the Forbid Other Plugins option by setting the noscript.allowedMimeRegExp about:config preference to a pattern matching the content types you want to allow. For instance, setting it to "application/pdf" will let PDF document load automatically on every site. That said, are you sure you need to? Adobe Acrobat Reader plugin got its share of vulnerabilites so far, and after all, you can still allow individual PDF documents from untrusted sites just clicking on their placeholders.
I've disabled the pdf browser helpers - both Adobe and Foxit - from running anything in Fx. After I unblock them in NS, Fx presents them for manual downloading. Ha, it's like the old dial-up days again.