MokiMeow/pdf

[Critical] Security Bypass in "Protect PDF" & Coordinate Misalignment in Editor

Open

#1 geöffnet am 4. Dez. 2025

Auf GitHub ansehen
 (0 Kommentare) (1 Reaktion) (1 zugewiesene Person)TypeScript (0 Forks)auto 404
bugenhancementgood first issue

Repository-Metriken

Stars
 (0 Stars)
PR-Merge-Metriken
 (PR-Metriken ausstehend)

Beschreibung

Bug Report: Protect PDF Functionality Failure

Module: Protect PDF Severity: Critical

Current Behavior: When using the "Protect PDF" tool, I can upload a file and set a password. The system appears to process the file and provides a download. However, the resulting downloaded PDF does not actually require a password to open. It opens immediately in any viewer.

Expected Behavior: The downloaded PDF should be encrypted and prompt the user for the password before displaying content.

Bug Report: Signature Misalignment in Editor

Module: Edit PDF / Sign Severity: Medium

Current Behavior: When using the "Edit PDF" tool to add a signature, there is a significant offset. When I click on the canvas to place the signature, the element appears in a different location than where my cursor clicked. The mouse coordinates do not match the canvas.

Expected Behavior: The signature should appear exactly where the user clicks.

Contributor Guide