New issue
Advanced search Search tips

Issue 614081 link

Starred by 3 users
Status: Duplicate
Merged: issue 500096
Owner: ----
Closed: May 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug



Sign in to add a comment

Security: Text can be easily COPIED from a SECURED PDF using a Chrome Browser

Reported by ashishcb...@gmail.com, May 23 2016 
VULNERABILITY DETAILS
To copy text from a SECURED PDF, first of all, open that file with CHROME browser. 
Then, press 'Control + P' or the PRINT command, then PRINT PREVIEW of that file would open up. All the text can be easily copied from that print preview and can be pasted anywhere.

VERSION
Chrome Version: 50.0.2661.102 m + stable
Operating System: [Windows 10 Home, version- 1511, OS build- 10586.318]

Comment 1 by lgar...@chromium.org, May 23 2016

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Mergedinto: 500096
Status: Duplicate (was: Unconfirmed)
This is fundamentally the same issue as being able to work around PDF DRM by printing to another PDF (Issue 500096).

There is only so much that the browser can do to prevent a dedicated user from copying out of a password-protected PDF.

Comment 2 by tsepez@chromium.org, May 23 2016 

Yes, we've had this report before, and we've made a decision not to implement this functionality.  It's a mis-feature; PDF's "secured" in this manner aren't secure in the slightest, and we wouldn't want to give the impression that they are.

Comment 3 by shima...@gmail.com, May 27 2016 

 >It's a mis-feature; PDF's "secured" in this manner aren't secure in 
>the slightest, and we wouldn't want to give the impression that they are.

But Google Chrome respects the "pseudo-security" of "fobid printing" in PDF.
Printing menu in the contextmenu is disabled.

And Google Chrome's internal PDF viewer respects the "pseudo-security" of "forbid copying" in PDF. (Only when the PDF is allowed to be printed, copying texts is enabled through printing actions. )

By the way, it seems that a stylesheet of "-webkit-user-select: none;" is also ignored in the print-preview panel.
►

Sign in to add a comment