Turn off javascript in android adobe pdf reader?

[jetm]

Does the android adobe pdf reader app run javascript in pdfs? If so how can I turn it off or force it to ask for permission before running anything?

[Bernd Alheit]

The app supports Javascript:

https://www.adobe.com/devnet-docs/acrobatetk/tools/Mobile/androidapi/classes/Doc.html 

[jetm]

Thanks for providing the documentation. Looks like it does support javascript. Do you know how to turn it off? It's a security concern for me.

[Bernd Alheit]

You can't turn it off. What security issues does you see?

[jetm]

I download Pdfs from the internet. I can't really be certain that someone didn't put some malicious JavaScript into the pdf then uploaded it to the internet without looking at the code. On my desktop, I use evince, which doesn't support javascript, so this is not really a concern. I use Adobe on my phone, though, so this is a concern.

[Bernd Alheit]

Acrobat Reader on Android doesn't execute malicious JavaScript.

[jetm]

How would it even tell though? Acrobat only has permissions to use storage and contacts, but it's really the storage access that worries me.

[Bernd Alheit]

Where does you see this?

Only following is possible :

https://www.adobe.com/devnet-docs/acrobatetk/tools/Mobile/androidapi/classes/Doc.html

[jetm]

Interesting, so javascript is only used for getting and setting form fields? I've read about the Pidief exploit, but I'm not sure how the actual exploit works. How would android acrobat protect against something like this?