UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36

Steps to reproduce the problem:
1. Go to http://www.nationwide.co.uk/~/media/MainSite/documents/products/current-accounts/flexplus/P2220-flexplus-mobile-policy.pdf
2. Open developer console

What is the expected behavior?
Expect the file to open correctly.

What went wrong?
File cannot be opened. Developer console gives the following error message:

Refused to load plugin data from 'http://www.nationwide.co.uk/~/media/MainSite/documents/products/current-accounts/flexplus/P2220-flexplus-mobile-policy.pdf' because it violates the following Content Security Policy directive: "object-src http://d2oh4tlt9mrke9.cloudfront.net".

Did this work before? N/A 

Chrome version: 56.0.2924.87  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 24.0 r0

Microsoft Edge can open it without any error message in developer tool.