CCFRI-8004: Refactor Vue PDF Embed (#1108)

* fix?: vue-pdf-embed generating inline scripts

* fix: eslint

* fix?: attempt to get vite to extract pdf bundles

* fix: pdfworker and api mismatch silent error

* fix: connect-src blocking inline pdf

Author: trev-dev

frontend/Caddyfile

@@ -25,7 +25,7 @@ header {
 	Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate"
 	X-Content-Type-Options "nosniff"
 	Strict-Transport-Security "max-age=31536000"
-	Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'"
+	Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self' data:; frame-ancestors 'none'; base-uri 'none'; form-action 'self'"
 	Referrer-Policy "same-origin"
 	Feature-Policy "fullscreen 'self'; camera 'none'; microphone 'none'"
 }

frontend/package-lock.json

@@ -35,6 +35,7 @@
     "moment": "^2.30.1",
     "nconf": "^0.12.1",
     "path": "^0.12.7",
+    "pdfjs-dist": "^4.10.38",
     "pinia": "^2.2.2",
     "prom-client": "^15.1.3",
     "rfdc": "^1.4.1",

frontend/package.json

@@ -7,19 +7,18 @@
 </template>
 
 <script>
-import VuePdfEmbed from 'vue-pdf-embed';
+// Fixes CSP problems with inline pdf scripts.
+import VuePdfEmbed, { GlobalWorkerOptions } from 'vue-pdf-embed/dist/index.essential.mjs';
+import PdfWorker from 'pdfjs-dist/build/pdf.worker.mjs?url';
+GlobalWorkerOptions.workerSrc = PdfWorker;
 
 export default {
   name: 'AppPDFViewer',
   components: { VuePdfEmbed },
-
   props: {
     pdfFile: {
       type: [String, Object],
       required: true,
-      default: () => {
-        return {};
-      },
     },
   },
 };