MokiMeow/pdf

[Critical] Security Bypass in "Protect PDF" & Coordinate Misalignment in Editor

Open

#1 创建于 2025年12月4日

在 GitHub 查看
 (0 评论) (1 反应) (1 负责人)TypeScript (0 fork)auto 404
bugenhancementgood first issue

仓库指标

Star
 (0 star)
PR 合并指标
 (PR 指标待抓取)

描述

Bug Report: Protect PDF Functionality Failure

Module: Protect PDF Severity: Critical

Current Behavior: When using the "Protect PDF" tool, I can upload a file and set a password. The system appears to process the file and provides a download. However, the resulting downloaded PDF does not actually require a password to open. It opens immediately in any viewer.

Expected Behavior: The downloaded PDF should be encrypted and prompt the user for the password before displaying content.

Bug Report: Signature Misalignment in Editor

Module: Edit PDF / Sign Severity: Medium

Current Behavior: When using the "Edit PDF" tool to add a signature, there is a significant offset. When I click on the canvas to place the signature, the element appears in a different location than where my cursor clicked. The mouse coordinates do not match the canvas.

Expected Behavior: The signature should appear exactly where the user clicks.

贡献者指南