Will PDF Reader be covered by security advisory policy?

Created on 5 August 2021, about 3 years ago
Updated 11 March 2023, over 1 year ago

Hello,

This module is very useful, but I was wondering if it's going to get vetted for security advisory?

Thanks!

💬 Support request
Status

Closed: won't fix

Version

1.0

Component

Miscellaneous

Created by

🇨🇦Canada Sseto

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • 🇪🇸Spain penyaskito Seville 💃, Spain 🇪🇸, UTC+2 🇪🇺

    After a very long year, I'm really hesitant to do that.

    We are embedding pdf.js code from 2012. Unless there's a considerable effort on updating our pdf.js usage to their latest releases, I'm pretty sure I don't want to be responsible of maintaining and keeping secure our fork.

    So the answer is no, 8.x-1.0 is not gonna opt in for security coverage. If we ever get to upgrade pdf.js, that would be 2.x.

Production build 0.71.5 2024