Version 9.1.260.3 (Support Release - 15 October 2026)

Technical

Resolved Custom domain CSP violation (#157768)

Problem

• The CSP middleware excluded the configured PDF server URL because it did not contain an expected server name. This blocked PDF viewer requests when the application’s domain differed from the PDF server’s domain, including custom domains.

Solution

• Validate the configured Services: PdfViewerServer URL and add its HTTP(S) origin to connect-src in both CSP versions, allowing PDF viewer requests across domains.