You guys know that PDF readers can turn off loading of web assets right? That you should turn it off or prompt or people can de-anonymize you just by getting you to open a PDF right?
Don't trust it if you don't trust the host, regardless. Exploits do exist.
Don't trust it if you don't trust the host, regardless. Exploits do exist.