PDF Viewer

71 downloads

Uploaded by

Ketchapp

Version

19 (build 19)  2 version(s)

PDF Viewer versions

20 (build 20)

36 downloads

19 (build 19)

71 downloads

Close

Size

1.8 MiB

Publish Date

2024-09-12

Category

Tools

Package

app.grapheneos.pdfviewer

Minimum OS

Android 8.0

SHA1

dc70ebf31f67b49973ed7a70a3294d2670f246c0

Description

The app doesn't require any permissions. The PDF stream is fed into the sandboxed WebView without giving it access to content or files. Content-Security-Policy is used to enforce that the JavaScript and styling properties within the WebView are entirely static content from the apk assets. It reuses the hardened Chromium rendering stack while only exposing a tiny subset of the attack surface compared to actual web content. The PDF rendering code itself is memory safe with dynamic code evaluation disabled, and even if an attacker did gain code execution by exploiting the underlying web rendering engine, they're within the Chromium renderer sandbox with no access to the network (unlike a browser), files, or other content.