add document viewer advance configuration

Author: gjulivan

content/en/docs/marketplace/platform-supported-content/widgets/document-viewer.md

@@ -45,6 +45,15 @@ These are the dimension configurations for document viewer:
 * **Maximum Height** — Determines the maximum size for the custom charts container.
 * **Vertical Overflow** — If maximum height is set, vertical overflow will determine the widget's behavior to show overflowing content if that content exceeded the maximum height allowed.
 
+## Advanced {#advanced}
+
+The **Advanced** tab allows you to configure settings for features that is beyond the normal configurations.
+
+* **PDF.js worker URL** — Configure the path for pdfjs worker script. This worker script is needed to render PDF type document using [pdfjs](https://github.com/mozilla/pdf.js?tab=readme-ov-file#including-via-a-cdn) library. 
+    * If left empty, the document viewer widget will retrieve pdfjs from CDN `http://unpkg.com/pdfjs-dist@4.8.69/build/pdf.worker.min.mjs`.
+    * Alternatively, user can grab `pdf.worker.mjs` from `[Local Development Project Folder]/deployment/web/widgets/com/mendix/shared/pdfjs/pdf.worker.mjs` and put it into their own `App Module -> Styling/web/js/pdf.worker.mjs` and set "`./js/pdf.worker.mjs`" as the worker URL configurations. This is recommended practice to support [CSP](/howto/security/csp/).
+
+
 ### Common Tab
 
 For more information, see [Common Section](/refguide/common-widget-properties/#common-properties) in *Properties Common in the Page Editor*.

content/en/docs/marketplace/platform-supported-content/widgets/security/_index.md

@@ -35,6 +35,11 @@ You can enable `allowlist` CSP for [Color Picker](/appstore/widgets/color-picker
 style-src 'self' 'unsafe-inline';
 ```
 
+### Document viewer
+
+You can enable CSP for document viewer by setting up pdfjs worker url to local path.
+See document viewer [advanced](/appstore/widgets/document-viewer/#advanced) configuration for more detail.
+
 ### HTML/JavaScript Snippet
 
 For information on HTML/JavaScript Snippet widget CSP configurations, see [HTML/JavaScript Snippet CSP](/appstore/widgets/security/content-security-policy/html-javascript-snippet-csp/).