Download trigger — window.open('file.pdf')

Click a button: JavaScript calls window.open('…') on the file URL, opening it in a new context. The button click supplies the user gesture browsers require, so the pop-up is not blocked.

Note: like the window.location trigger, Eicar_com.com (octet-stream) downloads in the new tab, while PDF.pdf renders inline. Serve the PDF as attachment/octet-stream to force a download (see README).

ready.