PDFs and sandboxed iframes with ViewerJS

No sandbox

Sandboxes

allow-same-origin

allow-same-origin allow-scripts

allow-same-origin allow-scripts allow-popups

allow-same-origin allow-scripts allow-popups allow-forms

allow-same-origin allow-scripts allow-popups allow-forms allow-modals