The JS code is not escaped, so something like: ```py pdf_writer.addJS(r'app.alert("\x41");') ``` will alert `x41` instead of `A`.