To avoid what is essentially user-mediated cross-origin information leakage, Blink will start to ignore the presence of the download attribute on anchor elements with cross origin attributes.
Documentation
Specification
Final published standard: Recommendation, Living Standard, Candidate Recommendation, or similar final form
Status in Chromium
Enabled by default
(tracking bug)
Consensus & Standardization
After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.
- Shipped/Shipping
- Shipped/Shipping
- No signals
Owner
Last updated on 2021-09-24
Comments
Safari and Firefox already implement the desired behavior. Edge tries to mitigate the impact of cross origin downloads by changing the file extension.