96 matches across 8 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/coverage_utils.js | 43 | async function fetchAndMergeWorkerCoverage(pdfWorker) { |
| LOW | test/unit/pattern_spec.js | 27 | function createFunctionBasedShading({ |
| LOW | test/unit/crypto_spec.js | 567 | function ensureAESEncryptedStringHasCorrectLength( |
| LOW | test/unit/crypto_spec.js | 591 | function ensureEncryptDecryptIsIdentity(dict, fileId, password, string) { |
| LOW | test/unit/common_pdfstream_tests.js | 66 | function getCrossOriginUrlWithRedirects(testserverUrl, redirectIfRange) { |
| LOW | test/unit/jasmine-boot.js | 135 | function installWorkerCoverageHook() { |
| LOW | test/unit/jasmine-boot.js | 175 | async function flushPendingWorkerCoverage() { |
| LOW | web/ui_utils.js | 328 | function backtrackBeforeAllVisibleElements(index, views, top) { |
| LOW | web/ui_utils.js | 459 | function isElementBottomAfterViewTop(view) { |
| LOW | web/ui_utils.js | 465 | function isElementNextAfterViewHorizontally(view) { |
| LOW | web/ui_utils.js | 590 | function normalizeWheelEventDirection(evt) { |
| LOW | web/ui_utils.js | 750 | function getActiveOrFocusedElement() { |
| LOW | web/ui_utils.js | 769 | function apiPageLayoutToViewerModes(layout) { |
| LOW | web/chromecom.js | 153 | function isAllowedFileSchemeAccess(callback) { |
| LOW | web/chromecom.js | 168 | function reloadIfRuntimeIsUnavailable() { |
| LOW | web/pdf_viewer.js | 82 | function isValidAnnotationEditorMode(mode) { |
| LOW | web/app.js | 2257 | function addWindowResolutionChange(evt = null) { |
| LOW | extensions/chromium/pdfHandler.js | 222 | async function isHeaderConditionSupported() { |
| LOW | external/openjpeg/openjpeg.js | 2 | async function OpenJPEG(moduleArg={}){var moduleRtn;var Module=moduleArg;var ENVIRONMENT_IS_WEB=true;var ENVIRONMENT_IS_ |
| LOW | external/brotli/decode.js | 67 | function calculateDistanceAlphabetSize(npostfix, ndirect, maxndistbits) { |
| LOW | external/brotli/decode.js | 77 | function calculateDistanceAlphabetLimit(s, maxDistance, npostfix, ndirect) { |
| LOW | external/brotli/decode.js | 371 | function inverseMoveToFrontTransform(v, vLen) { |
| LOW | external/brotli/decode.js | 736 | function decodeDistanceBlockSwitch(s) { |
| LOW | external/brotli/decode.js | 744 | function maybeReallocateRingBuffer(s) { |
| LOW | external/brotli/decode.js | 882 | function readMetablockHuffmanCodesAndContextMaps(s) { |
| LOW | external/brotli/decode.js | 1047 | function huffmanTreeGroupAllocSize(alphabetSizeLimit, n) { |
| LOW | external/brotli/decode.js | 1133 | function initializeCompoundDictionary(s) { |
| LOW | external/brotli/decode.js | 1157 | function initializeCompoundDictionaryCopy(s, address, length) { |
| LOW | external/brotli/decode.js | 1182 | function copyFromCompoundDictionary(s, fence) { |
| LOW | external/jbig2/jbig2.js | 2 | async function JBig2(moduleArg={}){var moduleRtn;var Module=moduleArg;var ENVIRONMENT_IS_WEB=true;var ENVIRONMENT_IS_WOR |
| LOW | src/core/fonts.js | 384 | function applyStandardFontGlyphMap(map, glyphMap) { |
| LOW | src/core/fonts.js | 1448 | function readTrueTypeCollectionHeader(ttc) { |
| LOW | src/core/fonts.js | 1481 | function readTrueTypeCollectionData(ttc, fontName) { |
| LOW | src/core/glyf.js | 701 | function pruneCompositeGlyphCycles(glyfTable, locaEntries, numGlyphs) { |
| LOW | src/core/crypto.js | 797 | function cipherTransformDecryptStream(data, finalize) { |
| LOW | src/core/xfa/data.js | 25 | class DataHandler { |
| LOW | src/core/postscript/wasm_compiler.js | 1068 | function buildPostScriptWasmFunction(source, domain, range) { |
| LOW | src/core/postscript/js_evaluator.js | 798 | function buildPostScriptJsFunction( |
| LOW | src/shared/image_utils.js | 29 | function convertBlackAndWhiteToRGBA({ |
| LOW | src/display/content_disposition.js | 31 | function getFilenameFromContentDispositionHeader(contentDisposition) { |
| LOW | src/display/display_utils.js | 427 | function getCurrentTransformInverse(ctx) { |
| LOW | src/display/network_utils.js | 40 | function validateRangeRequestCapabilities({ |
| LOW | src/display/network_utils.js | 82 | function extractFilenameFromHeader(responseHeaders) { |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/unit/ui_utils_spec.js | 201 | |
| LOW | test/unit/ui_utils_spec.js | 221 | // margins, borders, or padding. |
| LOW | test/unit/api_spec.js | 7121 | // Copy A contributes (page 1 kept): |
| LOW | web/pdf_thumbnail_viewer.js | 1861 | |
| LOW | web/ui_utils.js | 321 | * @param {Array} views - array of pages, into which `index` is an index |
| LOW | web/ui_utils.js | 341 | if (index < 2) { |
| LOW | web/ui_utils.js | 361 | // |
| LOW | web/ui_utils.js | 381 | // Now we backtrack to the first page that still has its bottom below |
| LOW | web/chromecom.js | 261 | // 1. When disconnected, the background page knows that the frame has unload. |
| LOW | web/pdf_history.js | 561 | // In practice, it seems that the event is arriving too late in order for |
| LOW | web/pdf_find_controller.js | 161 | |
| LOW | extensions/chromium/telemetry.js | 21 | // determine whether it is safe to drop support for old Chrome versions in |
| LOW | extensions/chromium/contentscript.js | 141 | } |
| LOW | extensions/chromium/contentscript.js | 181 | // <object> and <embed> elements have a "display:inline" style by default. |
| LOW | examples/learning/helloworld.html | 21 | // |
| LOW | src/core/cff_parser.js | 861 | privateDict.setByName("BlueFuzz", DEFAULT_BLUE_FUZZ); |
| LOW | src/core/cff_parser.js | 1501 | // when there is one in the main top dict and the sub top dicts. |
| LOW | src/core/annotation.js | 641 | // order of the quadpoints should be bottom left, bottom right, top right |
| LOW | src/core/annotation.js | 2381 | |
| LOW | src/core/annotation.js | 2441 | // /NeedAppearances trick to let the different software correctly render |
| LOW | src/core/fonts.js | 3081 | } |
| LOW | src/core/evaluator.js | 1341 | } |
| LOW | src/core/evaluator.js | 2461 | // A white <= fontSize * TRACKING_SPACE_FACTOR is a tracking space |
| LOW | src/core/evaluator.js | 5341 | // |
| LOW | src/core/type1_font.js | 121 | warn('Unable to recover "Length1" property in Type1 font -- using as is.'); |
| LOW | src/core/xfa/formcalc_parser.js | 241 | // operation ('... * - ...' can't be a subtraction). |
| LOW | src/core/postscript/ast.js | 1281 | } |
| LOW | src/display/content_disposition.js | 181 | |
| LOW | src/display/pages_mapper.js | 321 | // For example if the final pdf contains page 3 twice and they are moved at |
| LOW | src/display/canvas_dependency_tracker.js | 1201 | // We instead need to find the transform that maps the original |
| LOW | src/display/canvas.js | 621 | this.smaskPreparedEntry = null; |
| LOW | src/display/canvas.js | 1601 | ctx.restore(); |
| LOW | src/display/canvas.js | 3541 | height |
| LOW | src/display/pattern_helper.js | 721 | |
| LOW | src/display/editor/drawers/inkdraw.js | 21 | // The last 3 points of the line. |
| LOW | src/display/editor/drawers/freedraw.js | 21 | |
| LOW | src/display/editor/drawers/signaturedraw.js | 661 | outlines, |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/unit/scripting_spec.js | 2002 | value = await myeval(`eMailValidate("foo@bar.com")`); |
| LOW | test/unit/annotation_spec.js | 1974 | "(Lorem ipsum dolor sit amet, consectetur adipiscing elit.) Tj\n" + |
| LOW | test/unit/annotation_spec.js | 1974 | "(Lorem ipsum dolor sit amet, consectetur adipiscing elit.) Tj\n" + |
| LOW | test/unit/annotation_spec.js | 2003 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit.\r" + |
| LOW | test/unit/annotation_spec.js | 2003 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit.\r" + |
| LOW | test/unit/bidi_spec.js | 96 | const str = "Lorem ipsum dolor sit amet, consectetur adipisicing elit."; |
| LOW | test/unit/bidi_spec.js | 96 | const str = "Lorem ipsum dolor sit amet, consectetur adipisicing elit."; |
| LOW | test/unit/bidi_spec.js | 100 | "Lorem ipsum dolor sit amet, consectetur adipisicing elit." |
| LOW | test/unit/bidi_spec.js | 100 | "Lorem ipsum dolor sit amet, consectetur adipisicing elit." |
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | docs/contents/js/jquery-3.7.1.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | src/scripting_api/doc.js | 1147 | print( |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | src/core/annotation.js | 4609 | // In order to simplify things, we utilize straight lines for now. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | src/display/editor/tools.js | 850 | // like zooming, hence we need to check if the container has the |
| LOW | src/display/editor/tools.js | 863 | // like zooming, hence we need to check if the container has the |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | web/toggle_button.css | 54 | in such a case don't forget to change the revision in the above link). |
| LOW | src/core/parser.js | 602 | // Finally, don't forget to reset the stream position. |