MokiMeow/pdf

[Critical] Security Bypass in "Protect PDF" & Coordinate Misalignment in Editor

Open

#1 opened on 2025年12月4日

GitHub で見る
 (0 comments) (1 reaction) (1 assignee)TypeScript (0 forks)auto 404
bugenhancementgood first issue

Repository metrics

Stars
 (0 stars)
PR merge metrics
 (PR metrics pending)

説明

Bug Report: Protect PDF Functionality Failure

Module: Protect PDF Severity: Critical

Current Behavior: When using the "Protect PDF" tool, I can upload a file and set a password. The system appears to process the file and provides a download. However, the resulting downloaded PDF does not actually require a password to open. It opens immediately in any viewer.

Expected Behavior: The downloaded PDF should be encrypted and prompt the user for the password before displaying content.

Bug Report: Signature Misalignment in Editor

Module: Edit PDF / Sign Severity: Medium

Current Behavior: When using the "Edit PDF" tool to add a signature, there is a significant offset. When I click on the canvas to place the signature, the element appears in a different location than where my cursor clicked. The mouse coordinates do not match the canvas.

Expected Behavior: The signature should appear exactly where the user clicks.

コントリビューターガイド