fix cross domain security issue with bridge
hack around PDF.js for now

Fixes #74
Fixes #286