Download button not working sometimes on encrypted files

[chagai95]

Steps to reproduce

No idea

Outcome

Here is What happened:

2021-10-18.12-29-20.mp4

Operating system

Windows

Browser information

Version 93.0.4577.63 (Official Build) (64-bit)

URL for webapp

private server

Homeserver

private server

Will you send logs?

No

[germain-gg]

Could you send logs so that we can try to figure out what's happening

[chagai95]

I refreshed (cache refresh) does it still make sense to send the logs?

[germain-gg]

If you still experience the issue, yes

[chagai95]

No I don't - as seen at the end of the video 😉, the issue is about it happening in the first place

[SimonBrandner]

So I think this might be happening if the app loads to that room and you don't switch out of it. Will test

[SimonBrandner]

So I think this might be happening if the app loads to that room and you don't switch out of it. Will test

Hmm, that doesn't seem to be the case but the user that is experiencing this seems to be able to resolve this by switching in and out of the room. That room is also the room on which Element did load 🤔

[SimonBrandner]

Have rageshaked from that device though I have doubts about the logs being useful :(

[snowc0de]

I have the same issue, I installed it on Linux using the tarball and nginx (the homeserver is matrix.org). I am browsing the website using Firefox, I've tried to hard refresh but the issue is not solved.

My nginx config file follows this template:

server {
	listen 80;
	listen [::]:80;

	server_name domain.tld;

	return 301 https://domain.tld$request_uri;
}

server {
    listen       443 ssl http2;
    listen  [::]:443 ssl http2;
    server_name  domain.tld;

    ssl_certificate /etc/letsencrypt/live/domain.tld/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/domain.tld/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/domain.tld/fullchain.pem;

    root   /var/www/element;
    index  index.html;

    location = /index.html {
        add_header Cache-Control "no-cache";
    }

    add_header X-Frame-Options SAMEORIGIN;
    add_header X-Content-Type-Options nosniff;
    add_header X-XSS-Protection "1; mode=block";
    add_header Content-Security-Policy "frame-ancestors 'none'";

    error_page   500 502 503 504  /50x.html;
}

[SimonBrandner]

This just happened to me on a file that first was UISI but that then went away, switching to a different room and back fixed the issue. Have rageshaked

[NHAS]

We are having this same issue, users are unable to download encrypted files. I dont have any good information about what may be causing this.
I am also using nginx with a similar configuration to what has already been posted here, albeit minus the frame-ancestors direct (but with X-Frame-Options)

I can tell you that the web application does not even generate a request to our matrix server. So quite certain this is on the web app side.

For us it has been quite stubborn, I've tried all the fixes mentioned here and none of them work for two of our users.
Its also worth noting we do not get the same console errors as have been listed.

We are on the most recent version of element-web 1.9.5.

Also this issue does not occur on element-desktop.

[NHAS]

After talking to our affected users I've got some more information about the fault.

When clicking on the download button, the application successfully issue a network request.

However, it doesnt download the file correctly. In the console this error is shown (with domain omitted)

[emikulic]

I see this in the JS console when download fails:

FileDownloader.ts:50 Error while parsing the 'sandbox' attribute: 'allow-downloads-without-user-activation' is an invalid sandbox flag.
get iframe @ FileDownloader.ts:50
download @ FileDownloader.ts:93
doDownload @ DownloadActionButton.tsx:75
(anonymous) @ DownloadActionButton.tsx:71
[...]
Refused to frame '[url elided]' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

[SimonBrandner]

I think I've got the exact repro steps:

1. Have users A and B who have a DM
2. Both users switch to that DM
3. User B turns off their Element
4. User A runs /discardsession
5. User A sends a file/picture
6. User B turns on their Element
7. User B clicks the download button
8. Nothing happens

[SimonBrandner]

S-Minor as the workaround is to switch to another room and then back

[haydenmc]

This workaround doesn't work for me - I have the same console output as @emikulic, pasted below.

Should I file a new bug? Currently downloads do not work at all, even in unencrypted channels, and I have not found a workaround.

Running Edge Version 101.0.1210.39 (Official build) (64-bit) on Windows 11.

Element version: 1.10.10
Olm version: 3.2.8

FileDownloader.ts:50 
        
       Error while parsing the 'sandbox' attribute: 'allow-downloads-without-user-activation' is an invalid sandbox flag.
get iframe @ FileDownloader.ts:50
download @ FileDownloader.ts:93
doDownload @ DownloadActionButton.tsx:76
(anonymous) @ DownloadActionButton.tsx:72
await in (anonymous) (async)
ze @ react-dom.production.min.js:52
Ye @ react-dom.production.min.js:52
(anonymous) @ react-dom.production.min.js:53
wr @ react-dom.production.min.js:100
xr @ react-dom.production.min.js:101
(anonymous) @ react-dom.production.min.js:113
Me @ react-dom.production.min.js:292
(anonymous) @ react-dom.production.min.js:50
Dr @ react-dom.production.min.js:105
Zt @ react-dom.production.min.js:75
Xt @ react-dom.production.min.js:74
t.unstable_runWithPriority @ scheduler.production.min.js:18
Vi @ react-dom.production.min.js:122
Ae @ react-dom.production.min.js:292
$t @ react-dom.production.min.js:73

Refused to frame '[url elided]' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

[SimonBrandner]

@haydenmc, I don't think that is the the same issue - please open a new issue, thank you

[t3chguy]

Given the shape of the fix, this is a regression from the media event helper stuff