Disabling JavaScript

Currently there are two unresolved vulnerabilities in Adobe Reader and Acrobat JavaScript function. It's recommended to disable JavaScript, but when you do disable it- it prompts the user with the following dialogue box: "This document contains JavaScripts. Do you want to enable JavaScripts from now on? The document may not behave correctly if they're disabled." There's no option to turn off this popup, which means it's still left up to the user on whether they want to possibly compromise the box or not.
Now, I'm not just dealing with my home computer here, I'm dealing with an Enterprise class network with approximately 400 users..most of which will see the popup, read it and select yes in order to get away from the hassle of being asked this...every time they open a PDF file. This also means that when a user selects "yes", they are effectively bypassing the reason for having set it to disable JavaScript. This is working against what System Administrators are trying to accomplish by protecting their systems against vulnerabilities and possible attack. There are no other options that I can find providing a way to actually lock down this setting and make it "silent" for users...
Anybody have any ideas?  Adobe, can you please do something about this setting and add a function to make it run silently to the end user?

If you can't contribute something meaningful to my question and situation other than the lack of security gibberish, don't reply, please. Go troll your own post in the forums.  http://forums.adobe.com/thread/426908?tstart=0   (For anyone else who wants to just post their opinions and not a solution, here's a good place to do so).
I'm looking for a solution to the work-around issue, not debating how unsecure their software is and how vulnerable the next patch will be. "Go to something else"...is not a solution that will work in my case.

Similar Messages

  • My sites have been hacked and hostgator has told me to "Disable javascript - Use the firefox addon noscript" and I don't know how to. Are all updates always sent to me as that was another point made to prevent hackers? Thanks you. David. in English

    What are malicious scripts and what causes them? Over the years hackers found it hard to trick people into visiting suspicious sites so they're now targeting legit sites and using them to infect unknowing customers. In most cases an FTP account's password is obtained through key logging malware, then legit website files are modified to distribute the malware and gather more passwords. If your PC has been infected with one of these trojans, your bank account, email accounts, and FTP accounts may no longer be secure. * What to do if you find malicious scripts 1. Use the following online vulnerability scanner and ensure your software is up-to-date: http://secunia.com/vulnerability_scanning/online/?task=load 2. Download antivirus and fully scan your PC for malicious files. Here are some free online scanners: http://housecall.trendmicro.com/ http://www.bitdefender.com/scan8/ie.html http://www.kaspersky.com/virusscanner http://support.f-secure.com/enu/home/ols.shtml 3. Update all passwords that may have been obtained. Do not use old passwords, generate new ones. 4. Upload older versions of the files or contact support for assistance removing the malicious scripts. * Prevention - Ensure you use the latest browser version - Disable javascript - Use the firefox addon noscript - Download and install some free antivirus software, make sure it stays updated - Use http://www.avg.com.au/index.cfm?section=avg&action=onlinescan to test suspicious links you are given in emails or find online. If you are seeing a Google Attack Page when you visit the site, use the steps below to request that Google reindex the site and hopefully remove this block. This excerpt was copied from the URL below, and provides step by step instructions to request a delisting. http://www.google.com/support/webmasters/bin/answer.py?answer=45432 Once you have reviewed your site and are sure it is clean, you can can submit a request for review. Note that you'll need to verify site ownership before you can request a site review. 1. Sign in to Webmaster Tools with your Google account. 2. On the Dashboard, select the site you want. 3. On the Overview page, click Request a review and follow the instructions. Best regards, Tyler Evans Network Security Administrator HostGator.com LLC http://support.hostgator.com

    Thank you.
    I also had tried other means of getting answers and got an even more specific answer on just how to do this.  Below is the link to the actual knowledgebase article giving specific instructions since there are some files that need to be on the Palm and some on the card, etc.
    http://support.laridian.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=380&ratingconfirm=...
    I emailed Zondervan to see if they might be able to direct me to a downloadable manual.  The referred me to laridan.com who now supports their software.
    I followed the instructions, taking into account some things that were already where they needed to be, hot synced it and it seems to be working fine with 7.8 M free space on my Palm which I trust is enough for my other very large applications.
    Thanks for your help!
    Post relates to: Tungsten E2

  • I want a stop button for disabling JavaScript only in the current tab

    I want a 'Stop' button for disabling JavaScript only in the current tab.
    I searched for a feature like this but couldn't find it. It would be a great new feature.

    Tab Permissions: https://addons.mozilla.org/firefox/addon/4757

  • Would like to disable Javascript in Acrobat 8 + 9 for latest 0-day vulnerability

    I'd like to disable Javascript in my networked Acrobat 8 + 9 sytems to protect against the latest Acrobat vulnerability. Has anyone narrowed this down to a registry location to change? I've got 1,000 systems to hit and a registry change would be the best for me.

    This post should help you with disabling version 8:
    http://www.acrobatusers.com/forums/aucbb/viewtopic.php?id=17210

  • How do I disable javascript in FF 23? It's no longer under 'content'

    I consider it a security issue that I no longer have the ability top turn off java/javascript and what not. Is there no way to enable this? This is a terrible decision, if it was a decision. People should be able to control how they interact with the web, not the browser vendor. For a browser/organization that promotes freedom for the web, this is basic functionality for that freedom. Any solution would be helpful and please don't point me at some ugly plugin.

    I agree with that Mozilla seems to be taking away prefs, but not that they want to lock your browser, also Note that turning off Javascript has little benefit (it isnt very insecure and cant really take control of the system), you can still disable Java (not Javascript) from the addon manager Firefox Button/Tools => Addons.
    DO NOT MIX JAVA AND JAVASCRIPT, they are VERY SEPERATE, to avoid confusion read http://kb.mozillazine.org/JavaScript_is_not_Java <br>
    "''JavaScript is a completely separate technology from Java. Java was the "in thing" back in the days when Brendan Eich at Netscape created a programming language that was originally going to be called LiveScript, so unfortunately they decided to rename it from LiveScript to JavaScript in the hope of catching the media’s interest. A JavaScript script is usually a small series of commands that are often embedded in a webpage to do things like create fly-out menus, invoke pop-up windows, and validate form data. Support for JavaScript is built into all XUL-based applications such as Firefox, Thunderbird and Mozilla Suite. (Note that JavaScript is actually a complete programming language, and it is one of the languages in which Mozilla products are written.) Java is a programming language used to create stand-alone software applications (including games). Java programs can also be embedded in webpages, in which case they are called ‘applets’. Java applications and applets require additional software (the Java Runtime Environment) to be installed on your system. For more information about running these technologies in your Mozilla product you should consult the JavaScript and Java articles.''"
    In Firefox 23, as part of an effort to simplify the Firefox options set and protect users from unintentially damaging their Firefox, the option to disable JavaScript was removed from the Firefox Options window.
    However, the option to disable JavaScript was not removed from Firefox entirely. You can still access it from about:config or by installing an add-on.
    '''about:config'''
    # In the address bar, type "about:config" (with no quotes), and press Enter.
    # Click "I'll be careful, I promise"
    # In the search bar, search for "javascript.enabled" (with no quotes).
    # Right click the result named "javascript.enabled" and click "Toggle". JavaScript is now disabled.
    To Re-enable JavaScript, repeat these steps.
    '''Add-ons'''
    You can alternatively install an add-on that lets you disable JavaScript, such as
    *[https://addons.mozilla.org/firefox/addon/noscript/ No-Script] (to disable JavaScript on a per page basis, as required)
    *[https://addons.mozilla.org/firefox/addon/quickjava/ QuickJava] (to easily disable and enable JavaScript, automatic loading of images, and other content)
    *[https://addons.mozilla.org/firefox/addon/settingsanity/ SettingSanity] (adds back removed options for JavaScript, Advanced JavaScript Settings, loading images, and showing the Tab Bar)

  • Alternative to enable/disable javascript ?

    I am looking all the time into Firefox options but there is no option into the menu to disable or enable javascript. Is there any alternative solution or only "about:config" trick (which is very uncomfortable)...

    The check boxes to enable/disable JavaScript and load images automatically have been removed from "Options > Content".
    *http://limi.net/checkboxes-that-kill
    Some extensions that you can look at:
    *SettingSanity: https://addons.mozilla.org/firefox/addon/settingsanity/
    *QuickJava: https://addons.mozilla.org/firefox/addon/quickjava/
    The PrefBar extension also comes with a button to toggle JavaScript globally and only for the current tab.
    *PrefBar: https://addons.mozilla.org/firefox/addon/prefbar/

  • Disable Javascript on Mac 10.6.8

    I read that the solution to disable Javascript in mac is to go to preferences / content / disable Javascript checkbox BUT there is not checkbox for disable Javascript there... I have a mac 10.6.8 What can I do? Thanx

    Thank you for the reply, yes, I think I maybe made a mistake and downloaded a similar program (?) ... the logo is an "S" inside a round shape. It seams that Javascript has a different logo. The problem is that appeared a yellow stripe on the bottom of the firefox window and I have to allow new pages very often now.. I don't need it and I can't find a way to delete it. There is nothing similar in the applications file and I'm not an expert..

  • Disable Javascript in Internet Explorer

    I know this isn't a javascript forum but I found out how to do this and thought you might like to know. All other posts I've seen regarding this say you can't do it in IE. If nothing else, I hope this proves the point that web developers should not rely on js to implement significant portions of their sites.
    Click Tools, then click on Internet Options.
    Click the Security tab.
    Click the Custom Level button.
    Scroll to the Scripting section. Under Active scripting, click Disable.
    Click OK button.
    Finally, we can disable popup ads in IE.

    this is the wrong forum to post such an issue. Maybe but I've seen many threads that misrepresent this issue so I think it's helpful.
    and may
    i know under what under conditions should we disable
    JS. a majarity of the websites uses JS and we cannot
    disable them .such as yahoo which use javascript.I'm not saying you "should" disable javascript but it's very handy when you get irritating popup ads on your screen.

  • At event calendering site, getting message "There was a problem with your event submission. If you have disabled JavaScript please enable it and try your submission again." Javascript is ENABLED on my computer.

    I'm trying to submit an event to the events calendar at http://calendar.jtnews.net/events/index.php?com=submit. After I enter the Authentication words and press Enter, I get the message, "There was a problem with your event submission. If you have disabled JavaScript please enable it and try your submission again." According to my Firefox/Tools, etc., button, Javascript is enabled. I

    Hello mjswooosh,
    I'm very disheartened to hear that you've had ongoing problems when attempting to order from BestBuy.com. Our goal is ever to provide a fun and efficient shopping environment! Certainly creating aggravation serves neither you nor us and I apologize sincerely for this having been your experience.
    We recommend the troubleshooting steps you mentioned (i.e., clearing the browser cache, deleting temporary internet files and cookies) because this is the most common cause of this type of problem. I too have encountered this issue from time to time and these steps have almost always resolved the problem. I say almost always because there's one further step you can try: ensure that you have signed out of BestBuy.com, then perform the browser maintenance steps we've recommended. Afterward, before signing in to BestBuy.com, add your desired items to your cart and sign in as part of the checkout process. When the standard steps have not netted a resolution for me, this has solved the problem each time.
    I hope this helps. I'm very grateful that you took the time to write to us with your concerns and for sharing your very valuable feedback about your online experience.
    Sincerely,
    John|Social Media Specialist | Best Buy® Corporate
     Private Message

  • I am looking for an existing ADM file for group policy to disable Javascript

    Does anyone know if there are any ADM files for acrobat versions 5,6,7, and 9? I also am looking to disable Javascript from the Adobe Reader 9 and X.

    Yes, to get your instrument drivers for this device go to the following link:
    http://zone.ni.com/idnet97.nsf/9b2b33e1993d8777862​56436006ec498/0027109f3d6e32dd86256d6d0068a5bd?Ope​nDocument
    If this link doesn't work:
    Goto Ni Home,
    NI Developer Zone
    Instrument Driver Network,
    Set Manufacture criteria to: Hewlett-Packard
    For additional keywords type: 33120A
    click go
    and there it is....
    Good luck,
    Greg

  • Why can't we simply have an option to enable/disable Javascript on sites again in the settings for Firefox 27? Suddenly my Gmail attachments won't open. Gmail.

    Suddenly my Gmail attachments have stopped opening, and I receive the message: JavaScript must be enabled in order for you to use Gmail in standard view. However, it seems JavaScript is either disabled or not supported by your browser. To use standard view, enable JavaScript by changing your browser options, then try again.
    I found a Mozilla support thread where it was explained that Javascript has been turned off for a while in FF. OK. Then there was a complicated answer about how you could still turn it back on by typing in a config code into the address bar. What? Or, you could download an extension to do that for you. Why?
    Please-- if you really feel like users can't be trusted, and Javascript must be turned off, at least bring back the ability to enable/disable Javascript on a per site basis in options, without having to know code. It's Gmail.
    Thank you.

    There is nothing on that thread that says Javascript is turned off by default. to quote:
    "In Firefox 23, as part of an effort to simplify the Firefox options set and protect users from unintentially damaging their Firefox, the option to disable JavaScript was removed from the Firefox Options window.
    However, the option to disable JavaScript was not removed from Firefox entirely. You can still access it from about:config or by installing an add-on. "
    The UI checkbox to disable Javascript was removed, but the option still exists in about:config (which isn't code btw, it's just preferences), nor was Javascript turned off by default, in fact the opposite is true, it is enabled by default with the option to disable it made a little more difficult to find, as only advanced users need to disable Javascript.
    Please try to clear the cache and cookies for gmail, let's see if those are causing problems. [[Delete cookies to remove the information websites have stored on your computer]], [[How to clear the Firefox cache]]

  • Disabling javascript in firefox 23

    I saw my friend's Firefox beta which did not had any option to disable JavaScript . is it some where else or the option is removed ?
    If it is removed i should look for alternative browser until it comes to stable version of Firefox and leave Firefox for ever.

    Third party programs are a very poor method for something so simple. Now you have to worry about the third party program continuing to work, and whether you can trust an extra party (as I mentioned, even NoScript has done untrustworthy things before).
    About:config is also a very poor method. It takes longer and is more annoying to use. You can't explain it to family members (since you don't want them messing with it). There have been times javascript was causing problems with a website and I could explain how to turn javascript back on when they were done with it. For that matter, I don't even want to be using it all the time since when I'm tired I might double click and change something accidentally (the option is mixed in right in the middle of tons of other stuff).
    For such an important and simple function, these are ridiculously bad methods. I'm in shock Firefox has gone down this dark path.

  • Disabling JavaScript on Access Manager

    Hi,
    We are testing the liberty samples that come with the access manager using an LECP-enabled client. During the single sign on process, the service provider redirects to the identity provider but after typing the login information on identity provider, the access manager responds with a few redirects and finally sends content that contains javascript. The client browser in our case does not support javascript. We tried disabling javascript for our client on the "Browser UA" screen on the "Edit Client Types" page in the Client Detection Service on Access Manager console but it does not seem to have any effect. Is there any other way to disable Access Manager from sending javascript ?
    Please help.
    Thanks in advance.
    Regards,
    Aditya

    does your client support meta-refresh tags? AM often uses javascript to redirect the user. You would have to go in and modify/create new template files for your client to work around it.

  • Effect of Disabling Javascript

    Hello,
    Our customer is concerned about the current javascript vulnerabilities.  - We are aware of the workaround of disabling javascript. However of course our customer asks OK, whats the impact of doing that.
    I have scoured Google and can't find any useful info on what effect this actually has on the user experience.  I need to know what works, what doesnt etc. (common activities)
    Apols if this has been asked before
    Geezer

    Thanks for the reply,
    But, I'm aware that disabling JS will stop scripts from running, but I dont
    know what real world effect this has (if any). For example would it stop
    common web sites from running correctly?
    I'm not aware of any in house apps that use JS in Adobe but I'm guessing I
    can't say for sure
                                                                                    try67                                                        
                 <[email protected]                                            
                 >                                                          To
                                           Mike Lehmann/Australia/IBM@IBMAU   
                 05/05/2009 06:16                                           cc
                 PM                                                                               
    Subject
                                           Effect of        
                 Please respond to         Disabling Javascript               
                 clearspace-212993                          
                 3507-1LjF-2-88Ii@                                            
                 mail.forums.adobe                                            
                       .com                                                                               
    The impact of disabling JavaScript is that no scripts will work anymore,
    nor any form fields/bookmark actions/batch processes/links that use
    JavaScript in their set actions. In reality it's difficult to know what
    influence this will have on your client, since it very much depends on your
    working environment. Some people use JS quite a lot and some not at all.
    Which vulnerabilities is your customer afraid of? JS in Acrobat is not the
    same as JS on the internet, you know...

  • When will the 'disable javascript' button return?

    The disable javascript button was in firefox 22.
    It was disabled in 23, and still in 24. I am part or the user community who wants it back! I read on previous question/threads about it being disabled and not returning. :-(
    Really sad :-( !!!!
    It was simple and it worked.
    Why do you deprive the community of a liked security feature?

    Background information about why that pref was removed from options. <br />
    http://limi.net/checkboxes-that-kill/
    Just install an add-on or work through about:config to switch it on and off.

Maybe you are looking for