1) Is a browser embedded in the Foxit Phantom/PDF Editor products
Yes, our software uses the Chromium Embedded Open-Source Framework (CEF) for several functions such as Foxit eSign, the Start Page, logging into Google Drive, OneDrive, iManage and others.
2) Why is a browser required (we have to respond to inclusion of browsers outside of a technology roadmap)
A browser is not required to use Foxit PDF Editor. CEF is a BSD-licensed open source project founded by Marshall Greenblatt in 2008 and based on the Google Chromium project. Unlike the Chromium project itself, which focuses mainly on Google Chrome application development, CEF focuses on facilitating embedded browser use cases in third-party applications.
3) What release of the Chromium browser is in Phantom/PDF Editor
CEF branches track specific Chromium releases. The version of CEF embedded in Foxit PDF Editor v11.x is 83.0.4103.106.
4) How are security updates handled for the embedded browser
The CEF project is built on top of the Chromium project. As such, it is not subject to all the vulnerabilities Google Chrome is. Foxit reviews all vulnerabilities published by CEF and updates the embedded browser as needed.
a. Does Foxit release updates on the Chromium build cycle (every 6 weeks)
No.
b. How does Foxit identify all Chromium security vulnerabilities in the embedded product to its customers
Foxit PDF Editor uses the Chromium Embedded Open-Source Framework. This framework has stable releases on top of the Google Chrome project. Our embedded session was customized for Foxit PDF Editor and as such, it is not subject to all the vulnerabilities Google Chrome is. Foxit reviews all vulnerabilities published by CEF and updates the embedded browser as needed.
