URLs need to be sent to contentFetch exactly as they were received, this is because many apps will use signed URLs for PDFs being served from GCP or AWS. A signed URL needs to keep all its query params in the same order to validate.