Javascript And Certified Documents - Adobe 22002484 Manual

Acrobat Family of Products
Security Feature User Guide
In Acrobat versions earlier than 7.0, menu events were considered privileged contexts. Beginning with
Acrobat 7.0, execution of JavaScript through a menu event is no longer privileged. You can execute
security-restricted methods through menu events in one of the following ways:
By checking the item named Enable menu items JavaScript execution privileges.

By executing a specific method through a trusted function (introduced in Acrobat 7.0). Trusted

functions allow privileged code—code that normally requires a privileged context to execute—to
execute in a non-privileged context. For details and examples, see
JavaScript for Acrobat API Reference.

8.3.2 Javascript and Certified Documents

Whether JavaScript runs in certified documents depends on whether you have explicitly trusted the
sender's digital ID certificate for that action. You can control script behavior on a per-certificate basis or by
using trust anchors. If a signer's certificate chains up to another certificate (a trust anchor) that allows
multimedia, then JavaScript will run in that document. For example, some enterprises may issue a
MyCompany certificate that allows JavaScript. If all employee certificates use MyCompany as a trust
anchor, then they can send and receive certified documents within the company that contain working
JavaScript.
To block or allow execution of all JavaScript from the tool bar:
1. Choose one of the following:
Acrobat and Adobe Reader (Windows): Edit > Preferences > JavaScript

Acrobat and Adobe Reader (Macintosh): (Application) > Preferences > JavaScript

2. Check or uncheck Enable menu items JavaScript execution privileges.
3. Check or uncheck Enable global object security policy.
4. Choose OK.
5. If you need to enable JavaScript in certified documents, set certificate trust for the certifying certificate
as described in
Tip: Because scripts could potentially change the document's appearance or allow attackers
access to your system, participants in certified workflows should consider the source of
the document and the security of the workflow before enabling this option.
"Setting Certificate Trust" on page
Figure 81 JavaScript Security option
External Content and Document Security
Javascript and Certified Documents
app.trustedFunction
37.
102
in the