JavaScripts in PDFs as a security risk


For a full list of articles about security, see Overview of security in Acrobat and PDF content.

Acrobat and Acrobat Reader let you adjust application behavior so that JavaScript executes within your desired level of security. This helps restrict application access to JavaScript APIs and isolates workflows that do not require JavaScript APIs.

  1. Choose Edit > Preferences (Windows) or Acrobat Acrobat Reader > Preferences (Mac OS).

  2. From the Categories on the left, select JavaScript.

  3. In the JavaScript Security panel, set options to manage JavaScript: as needed.

    Enable Acrobat JavaScript

    Uncheck to disable JavaScript completely or restrict JavaScript through APIs.

    Enable Menu Items JavaScript Execution Privileges

    Enables executing JavaScript by clicking menu items. When off, privileged JavaScript calls can be executed through the menu. Executing non-privileged JavaScript calls through menu items is not blocked whether this box is checked or not.

    Enable Global Object Security Policy

    Allows JavaScript globally through APIs, or trusts specific documents containing JavaScripts.

Alternatively, you can modify your system registry settings to manage JavaScript execution.

For details, see the Application Security Guide at

More like this

Adobe logo

Sign in to your account