I posted a question yesterday about PDF files in a browser that can be found here. There you can find more information about dealing with PDF documents in browser.
My question here is how each browser handles PDF files by default.
PDF files can cause security concerns because the have the capability to contain executable code.
What I have found is that some browsers today have their own PDF viewers. Some of those viewers open in a sandbox environment which at least seems to protect the end user. I have confirmed that both Chrome and Firefox open PDFs in a sandbox environment.
Do the following browsers also open PDFs in a sandbox (2020)?
Now these sandboxes sound pretty great if they can mitigate any security concerns with PDF files. My next series of questions regard the sandbox environments.
Is there any way a user might disable the protections a sandbox provides?
Are there still concerns when opening a PDF in a sandbox? i.e. could a user, or the code in the PDF break out of a sandbox.
Are there easy ways to verify a user is opening a PDF in the correct browser or with the correct settings before opening?