haseebmalik18 opened a new pull request, #71803: URL: https://github.com/apache/airflow/pull/71803
Plugin `external_views` render in a sandboxed iframe missing `allow-downloads`, so the browser blocks any download from a plugin page. This adds the token. Safe because the sandbox already grants `allow-scripts` + `allow-same-origin`, which per MDN already lets same origin content drop the sandbox entirely. Same reasoning as #52257 , which added `allow-scripts` here for the same class of bug. Verified in Chrome 141 and Firefox 153 closes: #71797 --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes (please specify the tool below) Generated-by: Claude Code (Opus 5) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
