"Your organization blocked this file because it didn't meet a security policy" in Chrome

[likethesky]

I get "Your organization blocked this file because it didn't meet a security policy" when trying to download legitimate PDF forms from client.schwab.com ... After adding client.schwab.com to the excluded domains on Privacy Badger, the problem stopped.

[ghostwords]

Hello and thanks for opening an issue!

Is this in Chrome? To clarify, which domain is the PDF hosted on, and what is the domain of the site you are on when this happens?

[ghostwords]

This might be another Google's Manifest V3 bug where Declarative Net Request's definition of "thirdParty" is different from what extensions expect. Google's DNR defines the "thirdParty" filter with respect to the containing frame, while extensions like Privacy Badger expect the check to be made against the top-level document. This matters when a resource is loaded in a nested frame.

But I can't say for sure because I haven't yet been able to reproduce this issue.

[ckuethe]

I get the same error trying to download images from Google Voice conversations. Disabling PB on Google Voice allows me to save images.

PB 2024.07.17, Chrome 127 & 128 from Google DEB repo, Ubuntu 22.04LTS x86_64