Pretty certain they were already scanning for Java code in HTML. That leaves pdf. Unlikely, as EDGAR automatically rejects documents with such code embedded. They would never get through the validation process. The SEC doesn't even permit EDGAR documents to contain .HTML links that are outside of EDGAR.