From 3d0d141710d23b0f08c865100b4d55b4c2976486 Mon Sep 17 00:00:00 2001 From: "Philip P. Moltmann" Date: Wed, 27 Apr 2016 14:54:27 -0700 Subject: [PATCH] Add a security warning to PdfRenderer doc. Change-Id: Ia714d312665179366adae8e1923e4b9c339ebb59 --- graphics/java/android/graphics/pdf/PdfRenderer.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/graphics/java/android/graphics/pdf/PdfRenderer.java b/graphics/java/android/graphics/pdf/PdfRenderer.java index feb805260cb74..520ebe5f2db88 100644 --- a/graphics/java/android/graphics/pdf/PdfRenderer.java +++ b/graphics/java/android/graphics/pdf/PdfRenderer.java @@ -129,6 +129,10 @@ public final class PdfRenderer implements AutoCloseable { * Note: This class takes ownership of the passed in file descriptor * and is responsible for closing it when the renderer is closed. *

+ *

+ * If the file is from an untrusted source it is recommended to run the renderer in a separate, + * isolated process with minimal permissions to limit the impact of security exploits. + *

* * @param input Seekable file descriptor to read from. *