mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-08 12:58:11 -05:00
[GH-ISSUE #14599] feat: add toggle for allow-downloads in iframe sandbox #17311
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Barlock42 on GitHub (Jun 2, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/14599
Check Existing Issues
Problem Description
Currently, the iframe sandbox attribute used in Open WebUI does not include allow-downloads, which prevents users from downloading files that are generated inside the sandboxed iframe.
In some use cases — for example, generating and downloading data visualizations, documents, or reports — users are unable to download these files due to the missing allow-downloads permission in the sandbox attribute.
Desired Solution you'd like
Users should have the ability to download files generated inside the iframe. According to HTML5 specs, this can be enabled by adding allow-downloads to the sandbox attribute of the iframe.
Add a UI toggle or setting (e.g., in the preferences panel or advanced settings) that allows users to enable or disable the allow-downloads flag in the iframe's sandbox attribute.
Alternatives Considered
No response
Additional Context
MDN Web Docs: iframe sandbox attribute
@tjbck commented on GitHub (Jun 16, 2025):
Addressed with
8e139b04f0