Search Support

Beware of phishing attacks: Mozilla will never ask you to call a number or visit a non-Mozilla website. Please ignore such requests.

Learn More

PDF Viewer in Firefox Download Button Does Nothing - Works in Chrome though

  • 6 fhreagra
  • 1 leis an bhfadhb seo
  • 70 views
  • Freagra is déanaí ó Frank

more options

Hello,

I really enjoy Firefox, but lately I've been having to go back to Chrome to get things done. The latest is that when I view a PDF in the browser the option to download the file does nothing. I then tried the same website on Google Chrome, the button worked and I was able to download the file.

I tried setting Firefox to open the PDF in Acrobat but there were no changes. I also tried using Firefox in Private mode in case an extension was causing a problem.

The website is the county records search site for Miami, Florida. Search for any name, view a record, the click on Document image. A PDF opens in the browser with a print option, and a download option. The download option does nothing when clicked on. Do the same on Google Chrome, then it does work.

https://onlineservices.miami-dadeclerk.com/officialrecords/

Thanks for any help!

Réiteach roghnaithe

Enter about:config in the URL bar and set security.csp.enable = false. Then once again press the download button. Does it work now?

Read this answer in context 👍 1

All Replies (6)

more options

Réiteach Roghnaithe

Enter about:config in the URL bar and set security.csp.enable = false. Then once again press the download button. Does it work now?

Helpful?

more options

Thank You! That did help!! I was able to download the PDF.

Helpful?

more options

It means that their security setup is messed up.

Helpful?

more options

The site is using a custom PDF viewer in a frame in the page instead of Firefox's built-in PDF viewer or Chrome's PDF plugin. They aren't sending the actual PDF file, but a stream of data, and this is how they render the content.

As TyDraniu notes, Firefox is applying the site's Content Security Policy rules to the embedded viewer, which restrict the types of URLs the page can "load". I get this error in the Web Console for an example document when clicking the download button:

Content Security Policy: The page’s settings blocked the loading of a resource at blob:https://onlineservices.miami-dadeclerk.com/cdfbf8bd-7c23-400a-ad52-560e0cd6aca7 (“default-src”).

The rule for default-src in the CSP header does not allow blob: URLs -- those only appear under img-src (for images) (same for the main page and for viewer.html):

Content-Security-Policy: default-src https: data: 'unsafe-inline' 'unsafe-eval';img-src 'self' blob: https:;

I don't know why Chrome behaves differently in applying the same CSP rules.

Could you ask the site to take a look at this problem?

Someone who has a better idea how pdf.js downloading works could file an issue on pdf.js.

Helpful?

more options

You should keep CSP (Content Security Policy) enabled during normal browsing, especially on any site where you have an account you don't want to lose control of, since it can protect against alien content in web pages.

Helpful?

more options

Thank You, I enabled it again. It's a government website so I don't think they would be very responsive.  :-(

Helpful?

Cuir ceist

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.