I am working on a project that uses a Java Backend Application that hosts a PDF over a REST interface. Up to Chrome 87 and in Firefox this works perfectly fine. Since Chrome 88, however, I get this error:

Chrome Version: 88.0.4324.150 (Official Build) (64-bit)
I already tried:
- Disabling all browser extensions
- Setting a real filename for the PDF so it is hosted as /medias/sample.pdf?context=…
- Checking the Chrome release notes. The “Insecure downloads are blocked from secure pages, with changes through Chrome 88” sounds suspicious, but then the PDF would have been blocked already in Chrome 87
Does anyone have the same problem or a hint on what the problem could be?
I can't post the link to the PDF itself, these are the Request and Response headers, though:
