MokiMeow/pdf

[Critical] Security Bypass in "Protect PDF" & Coordinate Misalignment in Editor

Open

#1 aberto em 4 de dez. de 2025

Ver no GitHub
 (0 comments) (1 reaction) (1 assignee)TypeScript (0 forks)auto 404
bugenhancementgood first issue

Métricas do repositório

Stars
 (0 stars)
Métricas de merge de PR
 (Métricas PR pendentes)

Description

Bug Report: Protect PDF Functionality Failure

Module: Protect PDF Severity: Critical

Current Behavior: When using the "Protect PDF" tool, I can upload a file and set a password. The system appears to process the file and provides a download. However, the resulting downloaded PDF does not actually require a password to open. It opens immediately in any viewer.

Expected Behavior: The downloaded PDF should be encrypted and prompt the user for the password before displaying content.

Bug Report: Signature Misalignment in Editor

Module: Edit PDF / Sign Severity: Medium

Current Behavior: When using the "Edit PDF" tool to add a signature, there is a significant offset. When I click on the canvas to place the signature, the element appears in a different location than where my cursor clicked. The mouse coordinates do not match the canvas.

Expected Behavior: The signature should appear exactly where the user clicks.

Guia do colaborador