Skip to content
Fickle PDFs: exploiting browser rendering discrepancies
portswigger.net | research | #research | #pdf | #fraud | #browser-rendering | #widget-annotations | #pdfium
Summary
Fickle PDFs abuse widget annotations to render differently per browser — the same invoice shows £399 in Safari but £999 in Chrome — enabling fraud. Code to build hybrid PDFs with PDFBox included.
- Published
- Collected