[Webkit-unassigned] [Bug 166630] Inline styles added by WebKit when viewing PDFs cause CSP violation

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 24 03:33:28 PDT 2023


Alex Ruar <bugzilla at rutar.org> changed:

           What    |Removed                     |Added
                 CC|                            |bugzilla at rutar.org

--- Comment #6 from Alex Ruar <bugzilla at rutar.org> ---
This is perhaps related: it seems that the CSP violation sometimes causes PDF height to be severely truncated in the viewer.

Here is an example URL: https://rutar.org/papers/assouad_interpolation.pdf

Inspecting the source shows the following error:

> Refused to apply a stylesheet because its hash, its nonce, or 'unsafe-inline' does not appear in the style-src directive of the Content Security Policy.

The same PDF is viewable in Safari if first downloaded, with no issue. There do not seem to be issues viewing the PDF with non-webkit browsers either. There do not seem to be issues on iOS or iPadOS.

Safari 16.5.2 (18615.
Ventura 13.4.1 (c) (22F770820d)

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230824/5451b99d/attachment.htm>

More information about the webkit-unassigned mailing list