jedarden
|
2af191cf82
|
docs(bf-5w2us): document PDF JavaScript action structure research
Research on PDF JavaScript action dictionary structure for TH-04 threat model:
- Minimal action dictionary: /S /JavaScript + /JS (code)
- Attachment points: catalog /OpenAction, page /AA, annotation /A, form field /AA
- JS string formats: literal text, hex-encoded, or stream
- Required parent keys and trigger events
- Security considerations and detection strategy
Addresses all acceptance criteria for bead bf-5w2us.
|
2026-07-05 15:48:33 -04:00 |
|