Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

URL ending with .pdf causes Brave to ignore Content-Type, then fail because document is not PDF #10554

Closed
eljuno opened this issue Aug 17, 2017 · 22 comments

Comments

@eljuno
Copy link
Contributor

eljuno commented Aug 17, 2017

Test plan

Open the following links in a new tab and ensure they load without any issues:

Original issue description

  • Did you search for similar issues before submitting this one?
    Yes.

  • Describe the issue you encountered:
    Feel free to rename the title. :)

From community https://community.brave.com/t/url-ending-with-pdf-causes-brave-to-ignore-content-type-then-fail-because-document-is-not-pdf/6055?u=eljuno

When a response does not declare the content to be a PDF document, a browser should not attempt to render the response as a PDF.

But this is what Brave tries to do, when the URL ends with “.pdf”. Even with a response whose Content-Type is “text/html”.

Of course, with a “Content-Type: text/html” document, the PDF viewer will fail.

Brave should be ignoring the URL and instead use the Content-Type to decide what the content type is.

  • Platform (Win7, 8, 10? macOS? Linux distro?):
    macOS

  • Brave Version (revision SHA):
    0.18.14

  • Steps to reproduce:
    1.
    2.
    3.

  • Actual result:

  • Expected result:
    Brave fail to load the URL

  • Will the steps above reproduce in a fresh profile? If not what other info can be added?

  • Is this an issue in the currently released version?

  • Can this issue be consistently reproduced?

  • Extra QA steps:
    1.
    2.
    3.

  • Screenshot if needed:

  • Any related issues:

@bsclifton bsclifton added needs-investigation A bug not 100% confirmed/fixed that needs QA to better audit. plugin/pdfjs labels Sep 9, 2017
@bsclifton bsclifton added this to the Triage Backlog milestone Nov 27, 2017
@superMDguy
Copy link

This happens a lot for me in github when opening PDFs, because the URL contains the filename.

@bsclifton
Copy link
Member

+1 from @sepeiFH via #12763

@peteforsyth
Copy link

I have this issue frequently, using Brave on both Linux (Ubuntu Mate) and Windows 10. It's happened through several versions of Brave, I'm currently using 0.19.105.

I use a lot of these URLs while transcribing files on Wikisource. I find that I DO have the problem if I control-click a link that ends in .pdf (to open the link in a new tab). I also DO have the problem if I paste the URL ending in .pdf in the address bar manually.

But I DO NOT have the problem if I simply click the link.

To reproduce, visit the following page, and then try clicking the "Source" tab near the top of the page, using both methods described above: https://en.wikisource.org/wiki/Oregon_Historical_Quarterly/Volume_7/The_First_Fruits_of_the_Land_(Part_1)

@humphd
Copy link

humphd commented Feb 16, 2018

See my comment in #12008 (comment)

@humphd
Copy link

humphd commented Feb 17, 2018

Since #12008 got closed, I'll move my research notes here.

The problem is in the PDF check in js/lib/urlutil.js:

/**
   * Converts a potential PDF URL to the PDFJS URL.
   * XXX: This only looks at the URL file extension, not MIME types.
   * @param {string} url
   * @return {string}
   */
  toPDFJSLocation: function (url) {
    if (url && UrlUtil.isHttpOrHttps(url) && UrlUtil.isFileType(url, 'pdf')) {
      return UrlUtil.getPDFViewerUrl(url)
    }
    return url
  },

@mjclemente
Copy link

Not sure if this is related or helpful, but the following Dropbox shared PDF (https://www.dropbox.com/s/z4oarzyiqeci8df/API%20Landscape%20V2_March%202017.pdf?dl=0) renders fine when accessed via a link, but when pasted directly, I get the following error: Invalid or corrupted PDF file.

PDF.js v1.9.457 (build: 73aa2d92)
Message: Invalid PDF structure

@humphd
Copy link

humphd commented Mar 23, 2018

Yeah, this is exactly the problem: .pdf in the filename, but text/html gets returned with Dropbox's UI wrapped around it.

humphd added a commit to humphd/browser-laptop that referenced this issue Mar 23, 2018
@NejcZdovc NejcZdovc modified the milestones: Triage Backlog, Completed work Mar 27, 2018
@alexwykoff alexwykoff modified the milestones: Completed work, 0.25.x Apr 10, 2018
humphd added a commit to humphd/browser-laptop that referenced this issue Apr 30, 2018
@srirambv
Copy link
Collaborator

srirambv commented May 2, 2018

diracdeltas added a commit that referenced this issue Jul 18, 2018
 Fix #10554, #11059: remove check for .pdf in URL extensions, prefer response headers
diracdeltas added a commit that referenced this issue Jul 18, 2018
 Fix #10554, #11059: remove check for .pdf in URL extensions, prefer response headers
@kjozwiak
Copy link
Member

kjozwiak commented Jul 25, 2018

Verified on macOS 10.13.6 using the following build:

  • 0.23.72 c3b1cac
  • muon: 8.0.2
  • libchromiumcontent: 68.0.3440.75

Verified on Ubuntu 17.10 x64

  • 0.23.72 c3b1cac
  • Muon 8.0.2
  • libchromiumcontent 68.0.3440.75

Verified on Windows 10 x64 using

  • 0.23.72 c3b1cac
  • muon: 8.0.2
  • libchromiumcontent: 68.0.3440.75

@tbates
Copy link

tbates commented Oct 1, 2018

There is another issue here beyond what what fixed.

here's another failure to open. If there's an existing bug report, let me know

chrome-extension://oemmndcbldboiebfnladdacbdfmadadm/https://onlinelibrary.wiley.com/doi/pdf/10.1111/cdev.12853

@humphd
Copy link

humphd commented Oct 2, 2018

I can't get at that link due to Wiley's paywall. I'm not sure it's a PDF issue, but perhaps redirects on their side related to whether or not you can read it?

@tbates
Copy link

tbates commented Oct 2, 2018

It opens fine on safari, and the URL shown at Wiley is to the PDF for me.

@tbates
Copy link

tbates commented Oct 3, 2018

Another that fails pasted below (will also be paywalled).

screenshot 2018-10-03 14 58 43

I think the issue is that the server exposes a url that doesn't end in pdf. Safari handles these OK (i.e., the pdf renders fine and can be printed).

Interestingly, Safari displays the chrome for downlaod an dopen in preview, but these don't work. Also right-click "open in Preview" fails in safari.

chrome-extension://oemmndcbldboiebfnladdacbdfmadadm/https://uoe.sharepoint.com/sites/hss/ppls/PPLS%20Document%20Library/Research/Research%20Leave/ResearchLeavePolicyand%20Form%202019-2020.pdf?utm_campaign=2200746_PPLS%20Weekly%20Digest%20Test%2003.10.18&utm_medium=email&utm_source=College%20of%20Arts%2C%20Humanities%20%26%20Social%20Sciences%2C%20The%20University%20of%20Edinburgh&dm_i=2MQP,1B63U,7JASRD,48SQJ,1

@humphd
Copy link

humphd commented Oct 3, 2018

Are you able to see (and report here) the headers you get when that request is made?

@tbates
Copy link

tbates commented Oct 3, 2018

@humphd
Copy link

humphd commented Oct 3, 2018

I meant the headers sent with that URL. Whether or not PDF.js tries to render a URL depends on the headers sent along with the content. In the screenshot above, it is PDF.js that is reporting the failure, likely because it's getting HTML instead of a PDF; but I'm curious why it thinks it's a PDF (i.e., are the headers such as content-type reporting things incorrectly).

@tbates
Copy link

tbates commented Oct 3, 2018

thanks, you'd have to give me a how-to for me to capture headers.

@sepeiFH
Copy link

sepeiFH commented Oct 3, 2018

If you open the developertools (in brave go on a website and right click somewhere and click inspect element). Then go to network and reload the website. Then you get for each request the headers as you can see in the following picture
image

@tbates
Copy link

tbates commented Oct 3, 2018

cmd-option-I doesn't work, and right-click: inspect is grayed out (I guess the pdf viewer doesn't look like an element)
screenshot 2018-10-03 17 21 26

@sepeiFH
Copy link

sepeiFH commented Oct 3, 2018

You can open the developer console before you access the content. Then all following network traffic gets logged you have then just to find the right entry.

@tbates
Copy link

tbates commented Oct 4, 2018

unfortunately, as soon as the viewer widget loads, it closes the developer console...

@tbates
Copy link

tbates commented Oct 4, 2018

Candidates have hex names in the names panel, three ending in .SVG one in .woff2, and one with a massive name beginning data:application/font-woff;…

Could be:

General
Request URL: chrome://newtab/af7ae505a9eed503f8b8e6982036873e.woff2
Request Method: GET
Status Code: 200 OK
Referrer Policy: no-referrer-when-downgrade
Cache-Control: no-cache
Content-Security-Policy: script-src chrome://resources 'self';object-src 'none';child-src 'none';
X-Frame-Options: DENY
Provisional headers are shown
Origin: chrome://newtab
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.22 Safari/537.36

OR
Request URL: chrome://newtab/6c337c63662ee0ba4e57f6f8156d69ce.svg
Request Method: GET
Status Code: 200 OK
Referrer Policy: no-referrer-when-downgrade
Cache-Control: no-cache
Content-Security-Policy: script-src chrome://resources 'self';object-src 'none';child-src 'none';
X-Frame-Options: DENY
Provisional headers are shown
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.22 Safari/537.36

OR
Request URL: chrome://newtab/af7ae505a9eed503f8b8e6982036873e.woff2
Request Method: GET
Status Code: 200 OK
Referrer Policy: no-referrer-when-downgrade
Cache-Control: no-cache
Content-Security-Policy: script-src chrome://resources 'self';object-src 'none';child-src 'none';
X-Frame-Options: DENY
Provisional headers are shown
Origin: chrome://newtab
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.22 Safari/537.36

OR

General
Request URL: data:application/font-woff;base64,d09GMgABAAAAAB7gAA0AAAAAPhQAAB6LAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyAcMAZgAIFEEQgK5AjPSwuDMgABNgIkA4ZgBCAFhCQHg38bQzGjopa0WizJ/jLBnLDfFmgVA8WAjMQYm17rLpctQGMMff0xLAP9e8UitdktytVsrOWZv5O8i4lYIySZhefL7r9zu/tppgfvi7Oywt3ICAFWjlAIyUzwDE/b/GdMYVHqdNozEgQsMOCA42iJg1M4KiTNmltbc+nS5V9EysJl/aja9n/z/PcH7dz7vuz4+hIHjTcFliSBRhJwGoQaYO3z+3T/m4l84E6Ct15UHFpKiko2u8+DfwkuCWVSNIhJLWJ5Dw9iAv+2CyzwSGf2zgcjy7y/ZVniUQlIfX7v2O/u0baKqkwyFquI9W+STCZAZWiu0k42lyPa/y8AHQhTYBVVYcrCTSazgZnkFp4CB3v7RMnetb9f3mwhm9J+CXwlsMtxSkD2hbsqIsXCVAjVqrJ74XzNpqqXgFS4GLk0wO7DmGls/h8s0mUzpaYoYRLvRz5rBHAokyio+6NEBQgYgDgGgLgd6iMLcUe+2ltoJHpg9sJjuGejR2bEJFCrWg3QL8qTUWgRRi0JKlOs3qY+z4gMjANVryb2/3ayndo23gCbAVA11FWASCigAA3kCUFgWyj7aO24VysNeMzzvzQRtBN9t+/f8qKSqCKqGtWM2kbdk3dVzamaLy481RbZxil3yI2KorJ9t/nFQuJv+2RP7sad8b//fv999/Dww+MPjz08/PDAww0PRx5m31/3TxLESsAOEscEsZt1sg+8mo5XE5DzBdANAcoiK6rWx6VJoBAkGIT8rKuIaEyERkCm48RzzSrPnne8vJfPcu8sUFKE8BjFlLDGmZJp3aBBY+IVDxWXfha4TKPXR0bnT9Pujxa5eSsOIfEIahEibXRgTIcyk5kiWGMLGnqhfpBjpyHUhsmYum5IVOqFlzxAWdok4wtcZOg+QQeZTIVLtE41Gxq6YZ4Thi4xL/TDG6Znp6bZjJM26ZQxub5REuGITc+K/MhTDuu6plqeRa8Gp9XNy+OotNPM0Eqi2mV2rgltbH+7CsPy0IbBzvQJZn6S4tpmThCak3yRNUlXqxBg+5RDPcOzJQ7RyzSsl55eGYQaU+QQc/3Q0rBGemZyKivqrRDNk21kPGcqr7pBYEraaleBVn5YQ6NO4MUKWrTbbCUEBdPA0iDqLSVAyWutIVaKgMBNI2SdXrCbxmBiLWWh/DnH+uwiNZ+vcKrg3ktMzCpJsciQNMnHSMd1IHoSoFkYkxBJA/AS7b+DWt5Lx0V3Pcx4ZVZQevj4+UFqvgr5ZPRCNmdJmob4u87xpy+vKEm7XEGsaU4ii/ek0JPgFfug+YfPf1674ud5yZ9w5L8QjVDVrnUAo7RZHmhRs2cQQEYjaUGcJpx9ygMxkslfgMWt5zQrCGJf+fSZSBNoDaGIA7f1bjbDKySjIcwnj9/Lq49Rnst+ITkfBezPCPINt4sllI386kR/vkcHmMgkvk2fX96OEP/9rB8G7PwQVh+STQVeYE2mIBqPyGO/sIwqWC7vlGw2/jxf/rvXqhYtNADuy2LQ17Gx2G0xJHBZR5qgjahgPvXkqTQ8lEDBvM95BZgnAZsT1Qj8/3mmA6Q0nXExW4/3SVyiAUpnkKvmp9v2P334KtEfm07wFCLphK6UXotme66fyXnzWsbao8NaJL+fjwAvlPFKKWYkn0s1dVPX7mLnOxKST94WuFp0tiy4PPZzGNrreuzTHUa5+Q7sZOOI5duhAzdy1E1EYkPD6FYnYfK7VLt8lpHnyuIDZg2NJk/qYS90TZTOiMvOGXhqd9KT1UKqDLBWsExuBCyZqs+o8ngVC77l1wb8CqgsVp5cCuFH+/yRwVrZEDyp5Ex/yKzWbZKNsc6zwchK/hsLIuDABYdWKViItljFG9EO66F0oGtxDY3YJvXwrv1KCdWKlKtSKs8vWbCvxDQOVDYfLC0GbULoMW6RLAxYuoGlu8Gl2ahUJIO0OGEROMWKqIB4eAY1ZQTJtXgpGGHzShybTVZWZ3ph57zbvPu+x1iKoG31nzYVOirzizSQECzYLUlvwhFXzJBcf8905lW4huuIbglfULjdzAkHsi4JnIXFhUuSobKgO6VbXHFiAj+/OSOlclnz/+dSzE4jPYp59UaelYpWrNwjs9BN6Gbr4SltsPOnPMiSlJpkijuKQ+y9MHA2z3RzIJXnu7h47kW2TZs9gUpVon02CNbhee58M/WjLeXPmlCVyqYsroVAGn0YLV+rSkcDtQjFggWoNkpdrP2BPXgOcfXVZugVwvasweSx9LHuKOS8xaT2YseoNtck4MIziK/L77sUFwVON3lwqLXudqvLrLJsy4j7rugO4Lzra86XpesRdPmbuamgdy7xA2ed57dCg78066r7srvJeIpaffq8CqIOUox06UR7Nrew5LkVMYZeebleW0n09WXuDLHm/f7871NdB5ePKleeddLRbSZ6WZKpXZbigpuN7FXIL5HsRVs5SYa2C2EYELJ46vBabJTbLhYL9YuS5yaAA86U7Fy09RqDgjsWf9Nm1BYHsu94c1f8kNY16H05CsrLGSost15NnKiskjenKXQFT7HADo4chIkpNTaHyv5GziZwT67A5Y9cyKiaPlDzATQIdtdHVLen+CyNLPUZAhH/Cf5mO8lOj/gHaWpPRjN7TmHy4aSeMmKBmUxmXfk5vZ7mwAK1ooqTwSd1uXniPmXTarIVuVCxqbqxg2rnfyRHWR8uFnU7AyukSuC8JAIF8nHMUKiIQLuI/hvCZqra9dIJ+xXzOxCNxdY69T3UCIlWgiIYnKeZRTno77FPF1BnLDlNwtZ5tU8TdUlUsWOcb4tNfgwEkglajTZ6TGBGqWD+0SKtnlSTzbGqPnzCTPmibt9twt7n2MRqREyXF0j2b+D7c1pcLWPHHJuaR1w4YkWPUXEuNCZ2yXJ/9d+tOp6WkwUgWfcdRJ08/fAZqXHqv5dy4ulsvj6r2ByrS99qkUDdTQitOyLwOPK0Hzy7mCnR2Uj9bUdGTnkxU3Uxzpl41KvlPVzrCGr1e2YrHK6WscwLIehNHfAssMfYc+xFiEpvLqD/jz3lsDSLSY7u9cDrib8mWcVzjW4OfKrbtsyXmicwysnOA8tmU09erKTAtil9s5VlRbBdjDxvrSRl+Y3vQViqYVuAyz4Ke3s+e3iqODS4GpOyVm91nbhYbiGsBCVs5Zo26sLvFy5+veg4y6j7/qtSN3PV/m/9vxfw2KkCdx5PDRbHKLfDU+sB4acSCBMs4sQ7FMGcPAE84/O2D6Jbcu9iRJ9OjM3ooXzbUdW+3AfgAQLZFao3Tz8f6qegp0GdzpLzaBS1vUgUIk9SGgit7rBKMwMStAHJHFUaU8YtKUHtJC6WVKUL81mJiMW+Kfr1FgwqefZjKUwvev8Zl11QxGV89oeAd0cp53IVMghSyLxTDg0R1gS08U4XHw+kpT/OynqcnhbIuhIj3wBynZXQUpwPoNSsfdh88AGyYd/MqoNGMcw0FhYZmEyKVkGmER5/euxednYWoshlYFp1OKSOnhyKhQWHBmGUvNT0JM+W5nNNCMIryej+LbWQw65givl0QMhNmDLBmjIBcpUjpBZcQyS8cHvcgyZqWnQjuVcB+ngkr0WnIYa/dB9bMG+RVxT8TME46N2WyR8uqqKy+C3aiFHlzNE2fbZoqIic2YI2fNYoWr6JIJH79Lnm+RP0yQvNi6dgYE5GIbMwc647gVig14MBt8fvAdERh2elaapnRWoA/Xztpf7+ukv799Z1YbUX923EYpp4PA5bIQqqsJhGHszmAOIPHAamTlLfCZi84OmZux+by8sFMMKvDpFqw5oX9tRYG11muWPXxkEFxSH+ggP8T835VLSII9EICWGSCAwVVTX6fL4ldVO8WgJbKeVz+XAJxwEbYyQxZzuLuazycgUcxtGEWbvqvCBxu8T10vK8RlazQ7dj0sko+xwQ0eb+vk+fSRdbmGQHy9e+vMW9uCHcpD0kh5lSKS4WyhTCQmleUfWKy+AyF4Yr1NjCFaHfeRChq6W7nlPgdjNlo3WXdl5su7jc7q0n4lU5GpVFjaBKsQJViXLEKfkwFbzXM7nHNL25QfYAIJUlah9VIvFSKbKwjKWGZvFmS/U821B9SwsMG08yKbPLcJa6TCNQQAgih8rLpZXHU0bM7sdFskpczIWNPJFYHgoM9i7hcStU6r6huGnvefhCV6swjCdqfd35necbry6zNzQQtVguMdYOqFiOqoU5EsBzj8Z6/B7fkU8BmL3sl89/edbgoF8HZAWhBDT8GdsgGX2EeGk+B8b3m9xG94Ka+qAW7GSWzsuqKoO5ZUwRj1FdXoI7qfDMeiYb7yho1Et/7d3lZu5YvZZTATNDEOHiIaaprMgr0EvXLFGhQhej2M6eyYpaFBGW9HZ8JszMalU04PuOG+avftbjf3fZrY8fPQiaKfophPDHN2Mr/gsd2Rv7QFNa5BdJFJi4pJpBdSFS1MgDX+woLt1hCT3hDDlhUX0z3zrfCj4xyI1srMlZGxYIdvv0SliADvyTuJ6LVNCLeRWCNZ9kV7LLy+Qcwfp/NoKgc3t6knymWF6rsorn5TC7VCiz08vhVbUqY3mmJN+enj7rqFa1o8al2jmqtYKNr9Rju7HmjwMfN+9Wqce8P05fOdTXNzI80JPUA3a2/DIVmfo6R7Q4sFgEXo6LCn+fxJ9UjgdAyLnd7fE1phVNUrmgngN1qjB2VxNHwvaUwO4wfhRsURFQ9dKVMr1jkxbb4XJhOzbhdmAfD+gQB4IHcKqDCnaOB/AA2Do+tcpi05i8dQ68ogihF/1Nmgq+lW2tSxcI8QDOz0BqwU7kL746gAPK8VOn8Oz3sxQfZGTip3yveL/wgA/35ZHwAO4jkXHww+3NuGZXTY1m12bcYhm7grEQgaqBA3WpUKi7ywoFDVykUJVCfB8EYGdcPB74uL21zmLt9DeLxAIexBHAaPe0btC7bGg4oZAFtbAGrhtdmXf6sHUdJypM4T8WuHImyZqMB75ua20wYsYa7dQr8/rMizctW7ZpMQhbkq82FwkQLw2qFphJWVAaufz/prk32Il9nCh5Bl0KlRSiFhK3pt1GlFraeazyEja9MHvHP/XcKGUmQ84Ff4yLbrbirTdFYGx8Tw1uUcg1VucefM/I8Ehb6/DIyB7QMv4Cfwe3Bo83Bo2D0quB4+O1O1g7WLUnxu1LsN2YfbdqqQo8OTpn2xzXC8e7Gt/BWdtnuV6aPjCCivEvT03RTfnqlPug6oAKDIms4tsCHUklPi8As54eFvuv+cXXNWD1/ohdGm3EGg3I2//s6N6HfztZHT8c+NktgJmiidSAX0bYz5pEoD3XL4viDOLp+GAUxy+TC+u5UA+GQb31XCFDbnMbDDa3qlhFzdeWl+fjKkoxGM/dZnqZnhC5Xx7JHsQ/x8UtHN3ySrmako+fWqlVU4vUlJFqsCt3ee0MvWljNYdDqcxdT3G5CrsHROFUczeaZhiW+12ydi7cg2FwL+kyYY4YMf75J8KOKDwTrLfphZxqzqh5PazxUXnsXi95C5dZz6suJilkmfliuy5EYwS/7lkIzVggX/Acfy6Ty+bceJ8gV8OXDLKE1dzIltYOuGdrta+rmYjIZFCvzcjLcZvU3NHEwkuUaJVArDHpU/HPcXYkx81HAP3DxPj4xLlz94Xubel4OjANkVOLHB+HeDBxxNWcjLQZmat0a9eso4KWx69/3As9/ODH2lcz/44AOz/7fL4CFF4lN/HuoKhU8wSYQQfHLWRqWPgZSse7IyAHzEUcSBQ8h+MRwKLMSMcXhIzkdnGRXgxDekJKJtMUv2eq4/cWUGTKXJqWywGUDJUKGzjcUpo/qiN4Nj7o6sx2C7oXHAjvj4HcYrGwGeb0qFT6O9HME1ZUOtxGo70GLVRRqNqKCqpWRSkEl390MgXWeKm5Ek/B0/FaoMitM01RVMlhZinVn5UIW/66L4qXFXNtqMrSqZ+MVrMlFax8WWayunHyfUFcXiHPrqoGlTI5rFLKDFlKmXK5bvmwbDinyEEBlLR0vC+S40b4xuaORkglbHVIGkgw7btmeZHmjQ4LKDievqX9v7Lu8uhl66Y0XdP90fvG9fea74HFw4/nP7afiD1JrOm/23PXfjzi3EzgTzt2ZNcRe6Q121k/9cs40C3JkPYLo4dnSttE4LiDIS9NGrXrklBRcw6hyrs818aLbxPsTnG5o3P+zeGRUnYL2uJ5ubbl3ipCjqgZTdLZR5PK6LIDwWC6dUt1YGI+Q1KSOGozJCnFPUQCRn59HndUjjvC1zcwAnHbqUwy2EYTSy78edwUDHb/jsdj/82eG1IpmCIUiOlxV48d+WH23MhK/lQhX0IHTgxlr1cT1W1ubaid5HCEdyzy+zsWOcJNJKM2tM1FxNQbUKhcoNdimF4rAMGbJGKXMHD0ozxVefzZFpb5/5n87NJCrZHKsrU0ErSYRiQsLeHD7KTvIjLPst6anwKu0GVL4X0Xyyou7YfXkzjc8v3wvbul9Lv34H1eeElbOVRSUg7lkY7Q6UdIYFdvP+vgqehb0K2T+Mnb0O3oGwdZA/sh90HzAXMNmHQqXtepw6founTgFcfArUF1phYTEcWVEBPKb8vK5pdo443xTqWAIakSTusoNnLdCoOxEZFaFpvNoi7JzBHQNfGmBAfdW4kIE8z80SNl8mAxm1JwdIDc0/eioiKJnFwx8q3ImzCQfm2zpmqb01m1XVIOh6aw7VMdti1UlzIgF6/U68UjAwoPGXpBlJXlG6yXVtVjsySyH5ECUpkCUxRliF9lkJDCH2UzJQ2YqMJaxKgRChg11uIK8PoGTP5TxTfyVSkah1BjUSolQniugsOgV7CpBSwOnU6OAjDYajzsWjXmw0nj+QUFh44+1w5lCMDr61uqqra5nFXbt2idzjFt9Xanq2rb1iqnfstQpXjYYBKvcCmDUSA2NRnEwx8446EGJnui+wq3/RJ0ufzCFqkEZvyl1pllmROFOtB9AzJDIPaCwSiX600yuckklxuNsusMqKyUAeWTiqHSshKIBMTNE0/R/9AnE09gHNUcnX7DQcEonUhrM/0JkuJuxySEpPALhTwO4+u87ALIpiwFX03wiklJ2RkhwlmcHF4RkwcXq0UsYnziv7Hx+iRaEjWJlBAzPa5kLVwBl3PBL9efNbGfdQN+WjrexbLC3BwkhcfFs/EEQ7VFLFAZdKngP4lf6xcnTm1uqdNqW+ub/gUjSz1+DzgFIWQqhUsrdhTpuJTIP1KL28tEIHkJo8/EzwTTTytJZGVREVmpJBcXo2QSQXRAScUEJruszKRSWAJRSAFrMiyHtYbDrl8be/jsADOOu8a1cXYPg9NT+wmiIALkTPauX7U/U5oONR5oAuEnvAGtL1BWWhp7yROzFHLwTXp7VoVaAxpLYKyTgvCRs9mbf7X8TGk82XSyGWS0/ETkE99kihZsC9Nuta8YPyvqG1n6wRJwZjyEJB6fMqLl43KdSFf28UL/yuH5fRo50P3dDdGNb7vB2Krt27du2286bB17b2zL5i37YTYc9ONHyPNFYVshuzH7BVvA0Dl8rBeMZTn12RMYj179kC50rfhHlUj1tFJ/+NOV7hVwuTUE+zjBzlWr8QA+sri91W+2dHqaRfxg7ldZPo9l5FLzK9V5JTqHDWils7uKijxZWd7kzeZsAO6nUDfnF31UkoZHeOv8DrVTK8in8qqSG4WAw44svB6idxoksI69zzS9qtdrltWLI5HB8EGTW/ivcygCaZDIJD4uo55XVUxRoJlUiUsbgvsqP7Hlumr+IQRqcMfJG+7gy5U9At4iTMntbOfIWDZONPthoffqUlKGNw39E532XntWuj5JolKQyRqITcGVZJrcadNxKUaUUgSwXnetu/hr9D+06MEwHEy5EZlqK3e947gEjCc0WIyIO9zv3RVqE/I+K7hjVhFSm57No1rj4T45hzDvT/5gJbiQ3cRzo0+hCRaJ3eJoqB//Gmd3uwVifqWKQtFWVFCc6VuEOmqMRqdbCQ6mpevSwVeLpyBTXmeLFu+NlQ8bcGDZhGM7XS5s1ybcgq8wxcr3LRZlR+Rqa5FKBXV7zZlulQd9Aq4QsIMiAy3Ant4e8wys3+eUt4ji4Fhuu1geQCiyNBXHrZSWlVLeVyX0iU/hp/oaGwrYc6ofhfqVy5UQmNKMepZCOUvKu52ffztv36yEhFlxcSkJCSlxYPDmB/FxwumznRkF5vTMqB/yvtVMSzfQmkIyQdka6QwpoATWSj+SgrTOTDqdlhXriY+mYTgY/CyPnkXLjtXeBuliLmlHIZ65qiDLyFShxfP5/IJChF9YgCC6Ph/plM/YUjjA+sCaAB7h1zfgG7yPq/NQf2yTLR/PiZ+ZoM03z5Rp2pax0b5vDN9DtNMUpf49/9/0mOTif/J/jZG3aRXg6BrpiBQAxX0EQC0wC1CDDoFgemMAeoFQmmoIgfE4d8AIDg/OSDetCtLA2ikMLARbhnwH//IFdvILrOUDNsYTXGcydquJoCQA9CzuLMxl+S8DvoAtDsDZPL79f4TvIJuv/0+c/yd0qojsWzotZf91yPcgJl/gc36BF3HAeyydZ2CBrKAaugxklejlWOz7DLxKYV3gqurVijcg4gts5hcY5gNWxxNcYpF4gDuagHesjhOw33EC/0oQByzVrlL4zs5bnMZDb9fzsFwhmKak1DogTo/9nVP6N0b8AoM6omjV9DE/V81+zVX7h2EcsFjfNzos7T7AwpG3PQ0UPvpV4N+DVLNcAaK69AAlQiZnEQsKVuuGAcz/+GhrJ31enTNs/3+KIH1ZS7Y9LjUGy+o8Lhn1UdFWmB+aQQSgFs/BI7eKs3P1UQ9Q7397p7cIAbl61gtwq9z1ew9gpzCIUoq6favIXu1+ruUvwglRU8aOun/0C/KCVatkuOt68P5ZhRfgVmHR1I7MkK9COzNgU19xt/RnAFD3cP9blsrTObgybOor97O9BrCbtx0ESPVdxd8AcXa1fwBJiEXRO/NW1OxxbOqrBOjQZ0r3TakeoFG9ErAt8f9fczEQ0rczZXsM4srY5YkCkwgoh0nC4xGpn8OCAK3Wfx74sT4Myr+lQ/RLAK59bzwCxvop7vTv3b9rTripU7FwpQGCf9Mxdflxp/aX/yoQVlvezO+0H9sNUuphSR45k0NCEdSultL9Uh2Qk155mb9f8j56ISmOSMl3+8kBiWkWrsZiJIlpqhU5lcqvV1JrVNYHyl+mqxmKakJ1RY7fybJbSkVSjg86r8WeZpSuE1EdYf9G7X3CO5DB3+mZnIIjdX5Y9rnoikU5jtpRpXsaO0VDbRng15UePZmwa8EdEzEPpFRJ6Sr0ycaSFRFNXbQRIrVeap1yk0RCdyCTLawPQIC6BcHMvNKFaQ9l+G2f5idgCs8k0IVbTAN2pDOfX+5JNE2z2e1Q2lJmDt80+WWGagFRjopNI7K3MVMvs2FUUTtoka4QL5VUbucC1y81kegKIccib2Kg5qqU3EfqZ8ggPYll/iYJWSfeHC9DqmVFKTEzKO9GispFOS01sSS4LSXHaO+a1gVKeguj15TnGzSVl9zmpkOYGUQTyBCB1F5GLaRu367+3C+FAU8wmH/N6yjZDEUQgZVlCDusspKw9ihFGFAHNvV/fK2WQXXxt9V/ugjZBN4gH5LSHrm9YiAAmQsdHwQxQw4T6uEjRy4hU6WjR2xdSMPYzHHpnTNckJJS0tmMMKuS5pCYGEg0IrSId98UMjtPZE6zxvbq3rTBVJYgICgqhAKjAQwCpBkrBDEZYAVw3UnwWcEobttOmuZ27WSo8PZOCeZ6vVOSinhfDZ/m6cdVq067Bi5ONZoko6GgKkQajlwimZCfjYvZmclUp806dl6BqNWMNhu0O3cWFz/HCoF6Mr7eNCx3DE0ya7rCJ5tcBFqHbzZSnlKdrs3LzBSgXhtF2Y1TQciUYQeQRl4x+5e8W4xdg0ZaW5Qi7qYcWrBUlqLWnLCbWPFoC9ouRt6OXaRQGR8zD3tvLAcyLxcLWhyKmKJrw0ARFqldbYJZKr+yG1nNodY5uxFZzO+oF1mtBk75ZBASwQAQH0azOu1NQJRo9N/abHQjTQYHF4uHT0BoltkiRIoyR7QYc8WKEy9BoiTJUsyTKk26DJmyZMuRKw8JWT4KKpoChYoUK0HHUKpMuQpMLBA2Di4YD4JPQEhETEKqkoycghJKRQ1TpZqGFk5Hz8DIxJxQdlhksUvW+doSwwZssc+uTGKVdy202q9+M5QwVrjmQ78Ys98rv3tth0Nuu+kwC6sRNnfZ3XLHQ/fc98A3HJ565LEjnH620gvPPFfjOz9Yzs3Fw8fLb5ta9eo0aNSsSYtW32rToV2nbl3O2q5Xj/n6fO9H57101DFv+8A7jjvhtDOuO+mUG5Y64LIrLiacDyGYgS8SSTD3Kbz53UVp3IVyrIKtrkXmvwKjmxytaZMWAAA=
Request Method: GET
Status Code: 200 OK
Referrer Policy: no-referrer-when-downgrade
Response Headers
Access-Control-Allow-Origin: *
Content-Type: application/font-woff
Provisional headers are shown
Origin: chrome://newtab
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.22 Safari/537.36

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.