PDF is not shown correctly only showing the base64 (using CSP)

Question

we use following code to show a PDF in Browser (here is chrome used)

                    Response.AddHeader("Content-Disposition", "inline");
                    var file = GetDocument(document.Path);
                    return File(file?.Content, file?.Extension);

But it shows me only the base64 code in Browser, when i delete the CSP Tag in config it works correctly. Hope someone can help. Thx a lot

I have try many things in the Security Policy (in web.config) but nothing work still showing this-> enter image description here

This is the full string in config->

<add name="Content-Security-Policy" value="plugin-types application/pdf; default-src *  data: blob: filesystem: data: blob: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; child-src 'self' data: gap: ; connect-src * data: blob: 'unsafe-inline'; object-src * data: blob: 'inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: webdesigner28: ;style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'none'; "/>

Which content-type header are you sending back to the browser? — Progman, Aug 12 '23 at 13:51
Do you see this content type when you use network inspection in your browser and send the request? — Progman, Aug 12 '23 at 13:54
I open it in a new Tab, in the tab where the link is showed i get this in network https://ibb.co/Ld9CTL2 — DadaS Erdal, Aug 12 '23 at 14:02
The HTTP request that makes the call to download the file, what is the "Content-Type" header for that specific request? You can inspect the individual requests and check the request and response header. — Progman, Aug 12 '23 at 14:04
Does this answer your question? [Returning a file to View/Download in ASP.NET MVC](https://stackoverflow.com/questions/5826649/returning-a-file-to-view-download-in-asp-net-mvc) — Progman, Aug 12 '23 at 14:28
The second type of the `File()` method must be the content type, not the file extension. — Progman, Aug 12 '23 at 14:28
Progman, i kiss your heart thanks a lot..yes the second parameter must be the content type..u right man..thx thx — DadaS Erdal, Aug 12 '23 at 14:38

PDF is not shown correctly only showing the base64 (using CSP)

0 Answers0