IE 11 can't load pdf

[kubydog]

Hello @stephanrauh, the pdf viewer is broken on IE 11
Error Message: file origin does not match viewer's

I did research on this error and found it is caused by view-es5.js. In my project, I did a quick fix based on mozilla/pdf.js#7153, but it needs me to modify the source code

Is there any easy way to avoid this?

ngx-extended-pdf-viewer version: 1.5.1
angular version: 7

After I fixed the pdf loading issue. I got issues of changing page:
By scrolling:

By selecting thumbnail:

By entering page number in page input box, nothing happen, doesn't go to the page entered.

Chrome works fine

[stephanrauh]

What was your change to the source code? Did you modify the array HOSTED_VIEWER_ORIGINS?

[kubydog]

I added two lines code in view.js
var LOCAL_AUTO_DETECT_ORIGIN = window.location.origin;

var HOSTED_VIEWER_ORIGINS = ['null', 'http://mozilla.github.io', 'https://mozilla.github.io'];

HOSTED_VIEWER_ORIGINS.push(LOCAL_AUTO_DETECT_ORIGIN);

[stephanrauh]

Quick sign-of-life: I've started to investigate your topic. As far as I remember, I've already integrated your fix, but I was interrupted by private life. I hope I can find some spare time for this project soon, in a week or two. Stay tuned!

Best regards,
Stephan

[RobinBomkampDv]

Having the same problem. Any solutions upcoming?

[stephanrauh]

@kubydog The problems with scrolling and entering the page number should be a thing of the past. Update to version 1.7.0, and everything should be OK. If these errors still occur, report them at #154.

[stephanrauh]

@rbdv159 I assume you're referring to the "file origin" message?

[stephanrauh]

@rbdv159 @kubydog After thinking about it for a while, I don't believe this is an error. You've stumbled upon a protection against CORS attacks. No browser except IE11 will accept PDF files that don't come from the same URL as the Angular application.

I've tried to reproduce the bug, but I didn't manage to do so. Every combination that came to my mind either works or is rightfully blocked by the CORS protection.

The HOSTED_VIEWER_ORIGINS bit is a CORS protection, too. It has been added to the PDF viewer because the viewer is also added the Firefox and Chrome natively.

The `window.location.origin´ doesn't make any difference. In my tests, that is. I'll add it as soon as you manage to convince me it's useful. What's your precise scenario?

I'll close the ticket now, but I'm still listening to the channel. Don't hesitate to leave your suggestions or - even better - your reproducer (i.e. a small, simple, but complete project showing the bug).

Best regards,
Stephan