diff --git a/src/lib/components/chat/Artifacts.svelte b/src/lib/components/chat/Artifacts.svelte index 4dafea55ea..a6caa42106 100644 --- a/src/lib/components/chat/Artifacts.svelte +++ b/src/lib/components/chat/Artifacts.svelte @@ -335,7 +335,7 @@ title="Content" srcdoc={contents[selectedContentIdx].content} class="w-full border-0 h-full rounded-none" - sandbox="allow-scripts{($settings?.iframeSandboxAllowForms ?? false) + sandbox="allow-scripts allow-downloads{($settings?.iframeSandboxAllowForms ?? false) ? ' allow-forms' : ''}{($settings?.iframeSandboxAllowSameOrigin ?? false) ? ' allow-same-origin' diff --git a/src/lib/components/chat/Messages/Markdown/HTMLToken.svelte b/src/lib/components/chat/Messages/Markdown/HTMLToken.svelte index f057987c40..ffab5acd2f 100644 --- a/src/lib/components/chat/Messages/Markdown/HTMLToken.svelte +++ b/src/lib/components/chat/Messages/Markdown/HTMLToken.svelte @@ -78,7 +78,7 @@ src={`${WEBUI_BASE_URL}/api/v1/files/${fileId}/content/html`} title="Content" frameborder="0" - sandbox="allow-scripts{($settings?.iframeSandboxAllowForms ?? false) + sandbox="allow-scripts allow-downloads{($settings?.iframeSandboxAllowForms ?? false) ? ' allow-forms' : ''}{($settings?.iframeSandboxAllowSameOrigin ?? false) ? ' allow-same-origin' : ''}" referrerpolicy="strict-origin-when-cross-origin"