Bugfix:  PDF display issue - Update CSP object-src policy

PDF display is associated with object-src / frame-src policy with blob values. 

We allow those for only : 'self' blob:;

https://github.com/owncloud/web/pull/8498
