# File Downloads from the Home Directory Fail Only in Safari (version 4.2.3)
**URL:** https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926
**Category:** Get Help
**Tags:** ondemand2
**Created:** [July 13, 2026, 8:14am UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926 "2026-07-13T08:14:50Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@mnakao](https://discourse.openondemand.org/u/mnakao)
#### Post date: [July 13, 2026, 8:14am UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926/1 "2026-07-13T08:14:50Z")
Dear developers,
I installed the latest version of OOD 4.2.3, and noticed that file downloads from the Home Directory fail only in Mac Safari. The following message appears in the Safari console:
```auto
Refused to load .../pun/sys/dashboard/files/fs/...?download=... because it does not appear in the frame-ancestors directive of the Content Security Policy.
```
The same files can be downloaded successfully using Mac Chrome and Firefox. Other operations in Safari, such as renaming and uploading files, also appear to work correctly.
Has anyone encountered this issue?
Thanks,
---
### Author:  [@bsingleton](https://discourse.openondemand.org/u/bsingleton)
#### Post date: [July 13, 2026, 2:42pm UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926/2 "2026-07-13T14:42:44Z")
> [@mnakao](#):
>
> `Refused to load .../pun/sys/dashboard/files/fs/...?download=... because it does not appear in the frame-ancestors directive of the Content Security Policy.`
Could you share the device and Safari versions you are seeing this on? After some cursory research it looks like Safari can have some strange quirks with enforcing CSPs compared to the other browsers, but I am able to download just fine from OSC production running OOD 4.2.3, with Safari Version 26.5 (20624.2.5.18.3), on an M2 Mac running MacOS Sequoia 15.7.4.
My hunch is that this either has to do with a precise bug with your Safari version, or it is a generic Safari bug only getting hit because of your configuration of the `security_csp_frame_ancestors` value in ood\_portal. I’d be happy to compare whatever you can share about this config with what we use at OSC!
---
### Author:  [@mnakao](https://discourse.openondemand.org/u/mnakao)
#### Post date: [July 13, 2026, 3:38pm UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926/3 "2026-07-13T15:38:34Z")
@bsingleton
Thanks for looking into this. Here are the details of my environment:
- MacBook Air with an M5 chip
- macOS Tahoe 26.5.2
- Safari 26.5.2 (21624.2.5.11.8)
Thanks,
---
### Author:  [@bsingleton](https://discourse.openondemand.org/u/bsingleton)
#### Post date: [July 13, 2026, 4:28pm UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926/4 "2026-07-13T16:28:39Z")
Mmmm, I was able to update to your specific patch version of Safari but still was unable to replicate. There are a few things I have thought of for troubleshooting though. First, the frame-ancestor policy should affect all the iframe elements equally. Do you experience the same issue with grafana or XdMod panels in your instance?
Second, could you share the actual header that is sent by inspecting the page? It would be part of the response headers of the first item in the network tab. You may need to reload the page with the network tab open to collect this data. For example, mine looks like
---
### Author:  [@mnakao](https://discourse.openondemand.org/u/mnakao)
#### Post date: [July 14, 2026, 12:37am UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926/5 "2026-07-14T00:37:48Z")
Thank you for checking.
I have embedded Google Calendar in the dashboard using an iframe, and it works correctly. I have also attached the response headers.
I apologize for providing the information piecemeal, but the OOD server is behind a load balancer. The load balancer’s FQDN is `ondemand.fugaku.r-ccs.riken.jp`, while the server’s actual hostname is `ondemand2.fugaku.r-ccs.riken.jp`. In `ood_portal.yml`, I use `ondemand.fugaku.r-ccs.riken.jp` for `servername`.
I then added `'ondemand2.fugaku.r-ccs.riken.jp'` to `security_csp_frame_ancestors` in `ood_portal.yml`, and confirmed that this resolved the issue.
Thank you very much for your help.
---
### Author:  [@system](https://discourse.openondemand.org/u/system)
#### Post date: [July 16, 2026, 12:38am UTC](https://discourse.openondemand.org/t/file-downloads-from-the-home-directory-fail-only-in-safari-version-4-2-3/4926/6 "2026-07-16T00:38:28Z")
This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.