1638323 - Downloads for CORP-protected resources fail

Status: NEW

(Core :: DOM: Core & HTML, defect)

Description

[Adam Williams]

Attachment: dl_failed.png

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

With reference to bug 1459573

1. Clone https://github.com/lol768/corp-pdf-testcase and run the test server
2. Navigate to http://localhost:8080
3. Open main.pdf by clicking the link
4. pdf.js will render the PDF
5. Now attempt to download the PDF by clicking the download icon or using save-as

Actual results:

6. Download fails, despite the download being initiated from (at least, from the user's perspective!) the same origin as to the one that the resource is served from

Expected results:

6. Download succeeded

Comment 1

[Adam Williams]

See also: https://bugs.chromium.org/p/chromium/issues/detail?id=952834

Comment 2

[Adam Williams]

Correction:

Now attempt to download the PDF by clicking the download icon or using save-as

The former works, the latter fails.