Why are links, forms, and comments removed?

Short answer

They are removed because annotations and forms can carry actions, scripts, and hidden data that increase risk.

Last reviewed: 2026-02-20
tool-usage annotations forms links

They are removed because annotations and forms can carry actions, scripts, and hidden data that increase risk.

Why this matters

A strict default is easier to trust in high-risk workflows than partial filtering that can miss edge cases.

Safe default steps

  1. Assume interactive PDF elements are risky by default.
  2. Scrub first, then re-check whether content meaning is intact.
  3. If links are needed, add them later in a lower-risk copy.

Common mistakes

  • Expecting hyperlink behavior to remain unchanged.
  • Re-introducing form fields before sharing sensitive copies.
  • Confusing convenience with safety.

Limits

This default prioritizes safety over feature retention. Future modes may allow controlled toggles with warnings.

Related

Next safe step: scrub a PDF locally and review threat model limits.