Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.Problem/Motivation
By using the csp module and enabling sandbox directive, downloading of csf file generated by views_data_export doesn't work.
There is error in console:
Download is disallowed. The frame initiating or instantiating the download is sandboxed, but the flag ‘allow-downloads’ is not set. See https://www.chromestatus.com/feature/5706745674465280 for more details.
Steps to reproduce
Install and enable views_data_export. Create simple views with csv data export. Go to the view's page and click on csv icon. The page will be refreshed, but the csv file will not be downloaded.
Proposed resolution
Add additional options for the sandbox directive: allow-downloads, allow-downloads-without-user-activation.
Remaining tasks
User interface changes
API changes
Data model changes
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | csp-sandbox-download-3269720-2.patch | 773 bytes | khiminrm |
Issue fork csp-3269720
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
compare
Comments
Comment #2
khiminrm CreditAttribution: khiminrm at Centarro commentedComment #3
khiminrm CreditAttribution: khiminrm at Centarro commentedComment #6
gappleI've updated the available options according to the HTML spec (https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-ifr...)
Though it is listed on MDN, I can't find any spec or implementation references for
allow-downloads-without-user-activationComment #7
gapple