```
$(document).on('click', '#uploadSubmit', function(e){
    var myForm = document.getElementById('fileUploadForm');
    var data = new FormData(myForm);
    $.ajax({
        type:'POST',
        url:'/shipments/upload_docs/',
        processData: false,
        contentType: false,
        cache: false,
        data: data,
        success: function(result){
            $('.docs_action_tray').slideUp();
            var iframe = $('<iframe style="width: 40em; height: 30em;">');
            iframe.attr('src', result.url);
            $('#actionWindow').append(iframe);
        }
  });
});

```

Desired behavior is for the .pdf behind the returned url to display in the `<iframe>`. It works fine in Firefox, but Chrome just gives me an `OPEN` button that loads it in Reader. Is this a security impasse, or is there a solution for me?

EDIT:
I have tested `<object>` and `<embed>` and the same behavior occurs. I get a link to open the document, instead a preview of the document itself. I wonder if there is a default security feature that is overriding my efforts?

OSX 10.12.6
Chrome 69.0.3491.100 (Official Build) (64-bit)