Latest version failed to preview a pdf or download it

[weareoutman]

Describe the bug

When a user sends a pdf, the preview and download are both not working.

Inspecting the console, it reports:

Refused to connect to blob:http://localhost:44548/de84eff2-bc85-498e-b538-0a937418c43f because it does not appear in the connect-src directive of the Content Security Policy.

Reproduction

1. Send a pdf file
2. Click preview or download

Expected behavior

Preview and download both working

Platform and versions

1. Mac OS Tahoe 26.3.1
2. Cinny version: 4.11.2
3. Matrix homeserver: self hosted
4. Downloaded from: GitHub

Additional context

No response

[weareoutman]

Closing this, the preview is fixed by #549 . the download still not working, will track in #456