# Inline PDF Previews

**URL:** https://meta.discourse.org/t/inline-pdf-previews/157649
**Category:** Theme component
**Tags:** official, desktop, pdf-previews
**Created:** [July 13, 2020, 9:18pm UTC](https://meta.discourse.org/t/inline-pdf-previews/157649 "2020-07-13T21:18:10Z")
**Posts on this page:** 1
**Showing post:** 106

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [January 24, 2023, 2:47pm UTC](https://meta.discourse.org/t/inline-pdf-previews/157649/106 "2023-01-24T14:47:48Z")

</div>

There’s a bit of info about S3 in these posts I’ve fished out of the auto-timer if they’re any help?

> [@travelvc](#):
>
> I was able to fix this by adding the following CORS policy in my S3 bucket configuration.
> 
> ```plaintext
> <CORSConfiguration>
> <CORSRule>
> <AllowedOrigin>https://mydiscourse.url/</AllowedOrigin>
> <AllowedMethod>GET</AllowedMethod>
> <AllowedHeader>*</AllowedHeader>
> <ExposeHeader>Access-Control-Allow-Origin</ExposeHeader>
> </CORSRule>
> </CORSConfiguration>
> 
> ```

> [@Ed\_Bobkov](#):
>
> It’s necessary to add, that if you see this text in the error message `from origin 'https://lounge.travelmassive.com' has been` where your domain is without slash / at the end, then in the CORS configuration you should also add your domain without slash at the end like this:  
> **[https://mydiscourse.url](https://mydiscourse.url)**

---

_[View the full topic](https://meta.discourse.org/t/inline-pdf-previews/157649)._