Browser Security Bugs That Aren't: JavaScript in PDF (textslashplain.com)