272590 2024-04-12 09:18:59 -0700 Cannot download or display certain PDFs due to content security policy 2026-03-14 21:12:35 -0700 1 1 1 Unclassified WebKit PDF WebKit Nightly Build PC Linux NEW https://bugs.webkit.org/show_bug.cgi?id=264355 https://bugs.webkit.org/show_bug.cgi?id=249872 InRadar P2 Normal --- 1 mcatanzaro webkit-unassigned bugs-noreply caden dev.xszelu jscott mcatanzaro thorton webkit-bug-importer oldest_to_newest 2028100 0 mcatanzaro 2024-04-12 09:18:59 -0700 This is a follow up to bug #249872. Opening https://dor.mo.gov/forms/MO-1040%20Instructions_2022.pdf and attempt to download it using the PDF.js UI. It won't work: [Error] Refused to load blob:webkit-pdfjs-viewer://pdfjs/39176f55-4f67-4515-9733-dc0f6d764506 because it does not appear in the frame-src directive of the Content Security Policy. 2030233 1 webkit-bug-importer 2024-04-22 08:55:40 -0700 <rdar://problem/126863829> 2055591 2 mcatanzaro 2024-08-27 04:30:57 -0700 It's probably related to https://bugs.webkit.org/show_bug.cgi?id=264355 2108485 3 mcatanzaro 2025-04-03 05:47:42 -0700 *** Bug 290935 has been marked as a duplicate of this bug. *** 2108486 4 mcatanzaro 2025-04-03 05:48:15 -0700 There is another reproducer, depending on Fastmail, in bug #272590. 2149972 5 mcatanzaro 2025-10-10 07:32:07 -0700 (In reply to Michael Catanzaro from comment #4) > There is another reproducer, depending on Fastmail, in bug #272590. Oops, I meant to write: in bug #290935 2150073 6 caden 2025-10-10 15:06:20 -0700 #300492 is a duplicate of this bug, I believe. You cannot preview PDFs or DOCX in WebKitGTK because of this security policy violation. Breaks document previews in Proton Mail. 2150093 7 mcatanzaro 2025-10-10 16:04:14 -0700 *** Bug 300492 has been marked as a duplicate of this bug. ***