Skip to content

v4.4.1

Choose a tag to compare

View all tags
@alekswebnet alekswebnet released this 30 Oct 14:26
· 20 commits to master since this release
v4.4.1
853b255

Fixes

  • Locales under a strict CSP. The viewer no longer loads its locale map from a blob: URL, so a page Content Security Policy only needs the locale file's origin in connect-src: 'self' for files you serve yourself, or https://cdn.jsdelivr.net for the default ones. Before, it also needed connect-src blob:, and without it every toolbar label, tooltip and accessible name was blank. (#68, #69)
  • English when the locale file can't load. If the locale file fails, for example with a 404, a host the CSP blocks or no network, the interface now falls back to English and the console logs a warning. Before, every control was left without a label. (#68, #69)

Upgrading

  • If your CSP allows blob: in connect-src only for locales, you can remove it. Keep worker-src blob:: PDF.js still starts its worker from a blob: URL.

Full changelog: v4.4.0...v4.4.1

Assets 2
Loading