Unable to render PDF in Chrome when CSP sandbox flags are set

[wongngaisum]

Hi,

After I set CSP sandbox flags, it breaks PDF rendering, nothing is displayed. New windows opened from the sandbox inherit the sandbox flags in CSP. Sandbox is applied to Chrome's PDF render component, rather than the PDF itself. Is there anything I can do to avoid this problem?

CSP rule:
sandbox allow-modals allow-forms allow-scripts allow-same-origin allow-popups

Thanks!

[mrin9]

Never tested around the CSP rules.
I will try providing an additional method to download the PDF rather than opening in a popup.
Cannot provide a timeline for now, but will start working on it in a month. Meanwhile I am open for a PR