titozep

I had the same issue (HTTP 403). I am using WP 5.8, Nginx, PHP 7.4 and the Gutenberg PDF Viewer Block plugin. This plugins works by “injecting” (so to say) the PDF file into de viewer:

https://myIntranetServer/wp-content/plugins/pdf-viewer-block/inc/pdfjs/web/viewer.html?file=https://myIntranetServer/wp-content/uploads/2021/08/myfile.pdf

I have a security directive (in an include file) that prevents file injections, like this:

set $block_file_injections 0;
if ($query_string ~ “[a-zA-Z0-9_]=https://”) {
set $block_file_injections 1;
}
…
if ($block_file_injections = 1) {
return 403;
}
…

I would suggest to review your web server config.

Issue solved, Vasyl. Thank you.

Regards,
Tito Sepúlveda

Same here, but when using MAMP for Windows only. (I did a couple of fresh installs in Windows 10 PCs). I tried using xampp and there were no issues. Neither in a staging server (shared hosting).

As a side note, install the Admin Bar & Dashboard Access Control plugin and activate it. Then open the AAM UI…

Hope it helps!
Regards,
Tito Sepúlveda