00:55 <ocdtrekkie> kentonv: Do you have any idea why a download from a JS app would work when you open the frame in a new tab, but not when in the Sandstorm frame?

11:54 <Xand3r> Hi, i have a question: can i custom the domain.tdl/grains page? and where can i find a documentation for that

11:54 <Xand3r> google was not my friend

20:20 <kentonv> ocdtrekkie: Probably the download URL was not within the grain host, and did not use target=_blank. The URL might have pointed to a third-party server or it might have been a data: or blob: URL, which references data that already exists on the client.

20:21 <kentonv> ocdtrekkie: We've seen problems with data/blob URLs before. In principle they ought to be allowed but there are technical issues: https://github.com/sandstorm-io/sandstorm/issues/2602

20:23 <TimMc> I somehow missed blob: coming into existence. I last did serious client-side work in 2005 though.

23:55 <ocdtrekkie> kentonv: I am sure the data is coming from the local Sandstorm grain. But I don't even understand the JavaScript enough to give it a filename. It tries to download ".json" or ".csv", which is irksome too.

23:56 <ocdtrekkie> Also, kentonv, I am trying to investigate, but it sounds like Content Security Policy in Firefox may be blocking draw.io grain exports. I did find a recent article about Firefox changing some CSP stuff.

23:56 <ocdtrekkie> But I have not tested anything myself yet besides that draw.io works fine in Edge.

23:57 <ocdtrekkie> I actually kinda wonder if the reported draw.io bug is also your #2602 link above.

23:59 <ocdtrekkie> The draw.io issue explicitly found CSP in their console log. When I was playing with Scrumblr data export, I didn't see anything in console at all.