{
  "id": 14631552,
  "title": "The Filled Form You Sent Is Still Editable — Flatten It Before It Leaves Your Pipeline",
  "url": "https://urgent.news/2026/10/15/the-filled-form-you-sent-is-still-editable-flatten-it-before-it",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-15T06:48:26.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/marcushale/the-filled-form-you-sent-is-still-editable-flatten-it-before-it-leaves-your-pipeline-4aco"
  },
  "original_language": "en",
  "account": "When a client operations lead forwarded me a completed onboarding form last week, the initial impression was that it was fully signed and finalized. Clicking on the tax ID field and typing a character confirmed the form's apparent completion. However, despite the complete appearance, the form was not truly locked down. Every AcroForm field remained live, meaning any downstream user could alter bank details, dates, or names without leaving a trace in the archived copy. This issue is common in generated, collected, or archived filled PDF forms. The problem arises because a PDF form field is an interactive annotation that exists above the page and retains its own value and editing capabilities. Filling a field changes the value but does not merge it into the page content, which makes filled forms fragile. Downstream PDF editors can change the values without any password or special tools. Viewers may also display different values due to stale appearance streams, causing inconsistencies between the archived and submitted copies. To avoid these problems, the text advises flattening the form before it leaves the pipeline. Flattening turns the live fields into ordinary graphics and text, removing the interactive elements, ensuring the document renders consistently across all viewers. However, this process is irreversible and destroys any machine-readable field data. Therefore, the recommended procedure is to extract any necessary field data before flattening, keep the unflattened original in internal storage, flatten a copy for sending out or archiving, and verify that the flattened copy has zero live fields before archiving or sending it. This process ensures that the final form is both secured and functional.",
  "summary": "A client operations lead forwarded me a \"completed\" onboarding form last week with a note: \"Signed and finalized, please archive.\" I clicked into the tax ID field and typed a character. It accepted it. The form looked finished. Every field was filled, the signature was in place, it rendered perfectly. But nothing about it was locked — every AcroForm field was still live, which means anyone…",
  "key_points": [
    "Completed onboarding form appeared fully signed and finalized",
    "Form fields remained live, editable by downstream users",
    "Flattening removes interactive elements, secures final form"
  ],
  "editors_take": "Failing to flatten interactive PDF fields compromises document integrity by allowing downstream users to alter sensitive information without leaving a trace in the final archived copy.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}