From 465697eb10558d5c440ed058b292f588bcb2f8e8 Mon Sep 17 00:00:00 2001
From: calixteman <cdenizet@mozilla.com>
Date: Tue, 26 Jan 2021 05:56:01 -0800
Subject: [PATCH] JS - QuickJS sandbox initialization must be the last
 evaluated string (#12914)

- aims to fix issue #12912
---
 src/pdf.sandbox.js | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/src/pdf.sandbox.js b/src/pdf.sandbox.js
index df4ce1632..bb70d797c 100644
--- a/src/pdf.sandbox.js
+++ b/src/pdf.sandbox.js
@@ -61,21 +61,22 @@ class Sandbox {
     if (TESTING) {
       this._module.ccall("nukeSandbox", null, []);
     }
-    const sandboxData = JSON.stringify(data);
-    const code = [
-      PDFJSDev.eval("PDF_SCRIPTING_JS_SOURCE"),
-      `pdfjsScripting.initSandbox({ data: ${sandboxData} })`,
-    ];
+    const code = [PDFJSDev.eval("PDF_SCRIPTING_JS_SOURCE")];
     if (!TESTING) {
       code.push("delete dump;");
     } else {
-      code.unshift(
+      code.push(
         `globalThis.sendResultForTesting = callExternalFunction.bind(null, "send");`
       );
     }
 
     let success = false;
     try {
+      const sandboxData = JSON.stringify(data);
+      // "pdfjsScripting.initSandbox..." MUST be the last line to be evaluated
+      // since the returned value is used for the communication.
+      code.push(`pdfjsScripting.initSandbox({ data: ${sandboxData} })`);
+
       success = !!this._module.ccall(
         "init",
         "number",