PDF Injection leads to Cross-site Scripting

[HttpPost]
public ActionResult UploadPdf(HttpPostedFileBase file)
{
    if (file != null && file.ContentLength > 0)
    {
        // Validate file type
        if (file.ContentType.ToLower() != "application/pdf")
        {
            ModelState.AddModelError("file", "Please upload a valid PDF file.");
            return View();
        }

        // Generate a secure filename
        var fileName = Guid.NewGuid().ToString() + Path.GetExtension(file.FileName);
        
        // Save the file
        var filePath = Path.Combine(Server.MapPath("~/Uploads"), fileName);
        file.SaveAs(filePath);

        // Additional processing...

        return RedirectToAction("Index");
    }

    ModelState.AddModelError("file", "Please choose a file to upload.");
    return View();
}

To prevent PDF injection leading to Cross-Site Scripting (XSS) during PDF upload and viewing in an MVC (Model-View-Controller) application, you need to implement proper input validation, sanitize user input, and employ secure handling practices.