Version 9.1.260.3 (Support Release - 15 October 2026)

Technical
Resolved Custom domain CSP violation (#157768)
Problem
The CSP middleware excluded the configured PDF server URL because it did not contain an expected server name. This blocked PDF viewer requests when the application’s domain differed from the PDF server’s domain, including custom domains.
Solution
Validate the configured Services: PdfViewerServer URL and add its HTTP(S) origin to connect-src in both CSP versions, allowing PDF viewer requests across domains.