PDF Viewer App
Simple Android PDF viewer based on pdf.js and content providers. It doesn’t require permissions. The PDF stream is fed into a sandboxed WebView without network access, files, content providers, or other data.Content-Security-Policy enforces static JavaScript and styling from APK assets, blocking custom fonts handled by pdf.js.
It reuses the hardened Chromium rendering stack with limited attack surface exposure. The PDF rendering code is memory safe with dynamic code evaluation disabled. Even if an attacker gains code execution, they’re in the Chromium renderer sandbox with less access than in the browser.
