blob: and data: documents inherit their creator's CSP, which can block chrome: modules loaded by the pdf.js viewer. Scripts under resource://pdf.js/ are already exempt. Apply the same exemption to chrome: script loads whose loading principal is pdf.js. Differential Revision: https://phabricator.services.mozilla.com/D324064