HKLM
\
SOFTWARE
\
Policies
\
Adobe
\<
product name
>\
<version>
\
FeatureLockDown
\
cDefaultExecMenuItems
\
"tWhiteList"
5.7 Disabling global object access
By default, global object access is not allowed.
1. Go to
Preferences > JavaScript
(The exact path varies by product and platform).
2. In the JavaScript Security panel, set
Enable global object security policy
as needed. This values
sets:
[HKCU\Software\Adobe\<product name>\<version>\JSPrefs]
"bEnableGlobalSecurity"
Note
Toggles on and off the ability of a script to access objects outside of the current document sandbox. If
enabled, JavaScript objects are globally accessible.
5.8 High privileged JavaScript
High privileged JavaScript is restricted by default.
High privilege JavaScripts are Acrobat methods with security restrictions. These are marked by an "S" in
the third column of the quick bar in the JavaScript for Acrobat API Reference. These methods can be
executed only in a privileged context, which includes the console, batch, menu (for versions prior to 7.x),
and application initialization events. All other events (for example, page open and mouse-up events) are
considered non-privileged. The description of each security-restricted method indicates the events during
which the method can be executed.
Beginning with Acrobat 6.0, security-restricted methods can execute in a non-privileged context if the
document is certified and the certifier's certificate is trusted for executing embedded high privilege
JavaScript. In Acrobat versions earlier than 7.0, menu events were considered privileged contexts.
JS Workflow: High privileged APIs
Section 5 JavaScript Controls
Application Security Guide
Page 38
Section 5 JavaScript Controls
