Skip to content

Ignore unencrypted Base URI for encrypted documents

Jason Crain requested to merge jcrain/poppler:baseuri into master

It can be a security vulnerability if the document is encrypted but the Base URI is not, because if an attacker modified the document, they can change the URI to point at their chosen location.

Issue #814 (closed)

Merge request reports