GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.

If a malicious PDF is loaded using PDF.js, and the configuration option isEvalSupported is set to true (default setting), an attacker can execute unrestricted, attacker-controlled JavaScript. This can ...