With the new PracticeNet templates (e.g with embedded PDFs)
Ensure that the most recent Budget is called BudgetSummary.pdf
Ensure that the most recent Newsletter is called Newsletter.pdf

Create a .htaccess file within the folder for the website with the following: 

<IfModule mod_headers.c>
  <FilesMatch "\.(pdf|PDF)$">
    Header set Access-Control-Allow-Origin "*"
  </FilesMatch>
</IfModule>


If you do not create the HTACCESS file you will get a CORS XSite rejection.