BUG - #286

Author: codehippie1

lib/pdfjs/web/postmessage-wrapper.js

@@ -6,6 +6,18 @@
   // #region URL Security Validation
   let originalFileUrl = null;
   let urlValidationEnabled = true;
+
+  // Read initial urlValidation flag synchronously from query params
+  try {
+    const __urlParams = new URLSearchParams(window.location.search);
+    const __uv = __urlParams.get('urlValidation');
+    if (__uv !== null) {
+      const lowered = String(__uv).toLowerCase();
+      urlValidationEnabled = !(lowered === '0' || lowered === 'false' || lowered === 'off');
+    }
+  } catch (_) {
+    // ignore
+  }
 
   function initializeUrlValidation() {
     // Get the initial file URL from query parameters

lib/src/ng2-pdfjs-viewer.component.ts

@@ -1931,6 +1931,7 @@ export class PdfJsViewerComponent
     let viewerUrl = this.getBaseViewerUrl();
     viewerUrl = this.addFileParameter(viewerUrl, fileUrl);
     viewerUrl = this.addViewerIdParameter(viewerUrl);
+    viewerUrl = this.addUrlValidationParameter(viewerUrl);
     viewerUrl = this.addCacheBustingIfNeeded(viewerUrl);
 
     return viewerUrl;
@@ -1952,6 +1953,11 @@ export class PdfJsViewerComponent
       : viewerUrl;
   }
 
+  private addUrlValidationParameter(viewerUrl: string): string {
+    const flag = this.urlValidation === false ? 0 : 1;
+    return `${viewerUrl}&urlValidation=${flag}`;
+  }
+
   private addCacheBustingIfNeeded(viewerUrl: string): string {
     if (this.isDevelopmentMode()) {
       const cacheBuster = Date.now();