Removed eval

closes #491

.babelrc

@@ -1,19 +0,0 @@
-{
-  "presets": [
-    ["env", {
-      "targets": {
-        "browsers": [
-          "ie > 9"
-        ]
-      }
-    }]
-  ],
-  "plugins": [
-    "transform-es2015-modules-umd"
-  ],
-  "env": {
-    "production": {
-      "presets": ["minify"]
-    }
-  }
-}

.gitignore

@@ -1,6 +1,3 @@
 node_modules/
 .DS_Store
 .idea/
-
-# Generated files
-/dist/

CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [2.0.0] - 2018-10-17
+
+- Removed eval to resolve CSP [#465]
+
+## [2.0.0-rc.4] - 2018-10-17
+
+- Don’t throw on module.exports
+
+## [2.0.0-rc.3] - 2018-09-27
+
+- Switch export method
+
+## [2.0.0-rc.2] - 2018-09-26
+
+- Added a changelog.md
+- Reverted `a.click()` to use dispatch with a try-catch ([#465], [#382])
+- Made third argument to an object where you have to pass `{ autoBom: true }`
+  - boolean are depricated but still works
+
+## [2.0.0-rc.1] - 2018-09-26
+
+- saveAs don't return anything
+  - The object that dispatched `writestart progress write writeend` are gone
+  - detecting such features was never possible and nobody seems to use it.
+- Removed the demo folder
+- Removed date/version from top of the file
+- Dosen't crash in web workers ([#449])
+- Support saving urls ([#260] with workarounds for cross origin)
+- Uses babel universal module pattern (UMD) to export the package
+- Provides source map now as well.
+- use a[download] before msSaveAs ([#193], [#294])
+- removed dist from .gitignore (npm uses it if it don't find a .npmignore)
+- autoBom is now reversed so you have to tell when you want to use autoBom ([#432])
+- `a.click()` since there are new and depricated event constructors that works differently ([#382])
+- opens up a new popup (tab) directly for the fallback method since the FileReader is async
+- removed the explicitly MSIE [1-9] check
+- Uses new anchor link for each save (might solve multiple download problems)
+
+  [#382]: https://github.com/eligrey/FileSaver.js/issues/382
+  [#449]: https://github.com/eligrey/FileSaver.js/issues/449
+  [#260]: https://github.com/eligrey/FileSaver.js/issues/260
+  [#193]: https://github.com/eligrey/FileSaver.js/issues/193
+  [#294]: https://github.com/eligrey/FileSaver.js/issues/294
+  [#432]: https://github.com/eligrey/FileSaver.js/issues/432
+  [#382]: https://github.com/eligrey/FileSaver.js/issues/382
+  [#465]: https://github.com/eligrey/FileSaver.js/issues/465
+  [#469]: https://github.com/eligrey/FileSaver.js/issues/469
+  [#470]: https://github.com/eligrey/FileSaver.js/issues/470
+  [#491]: https://github.com/eligrey/FileSaver.js/issues/491

README.md

@@ -1,23 +1,19 @@
-If you need to save really large files bigger then the blob's size limitation or don't have 
+If you need to save really large files bigger then the blob's size limitation or don't have
-enough RAM, then have a look at the more advanced [StreamSaver.js](https://github.com/jimmywarting/StreamSaver.js)
+enough RAM, then have a look at the more advanced [StreamSaver.js][7]
 that can save data directly to the hard drive asynchronously with the power of the new streams API. That will have
 support for progress, cancelation and knowing when it's done writing
 
 FileSaver.js
 ============
 
-FileSaver.js implements the `saveAs()` FileSaver interface in browsers that do
-not natively support it. There is a [FileSaver.js demo][1] that demonstrates saving
-various media types.
-
 FileSaver.js is the solution to saving files on the client-side, and is perfect for
-webapps that need to generate files, or for saving sensitive information that shouldn't be
+web apps that generates files on the client, However if the file is coming from the
-sent to an external server.
+server we recommend you to first try to use [Content-Disposition][8] attachment response header as it has more cross-browser compatible
 
 Looking for `canvas.toBlob()` for saving canvases? Check out
 [canvas-toBlob.js][2] for a cross-browser implementation.
 
-Supported browsers
+Supported Browsers
 ------------------
 
 | Browser        | Constructs as | Filenames    | Max Blob Size | Dependencies |
@@ -58,16 +54,16 @@ saveAs must be run within a user interaction event such as onTouchDown or onClic
 
 Syntax
 ------
-### Import saveAs() from file-saver 
+### Import saveAs() from file-saver
 ```js
-import { saveAs } from 'file-saver/FileSaver';
+import saveAs from 'file-saver';
 ```
 
 ```js
-FileSaver saveAs(Blob/File data, optional DOMString filename, optional Boolean disableAutoBOM)
+FileSaver saveAs(Blob/File/Url, optional DOMString filename, optional Object { autoBOM })
 ```
 
-Pass `true` for `disableAutoBOM` if you don't want FileSaver.js to automatically provide Unicode text encoding hints (see: [byte order mark](https://en.wikipedia.org/wiki/Byte_order_mark)).
+Pass `{ autoBOM: true }` if you want FileSaver.js to automatically provide Unicode text encoding hints (see: [byte order mark](https://en.wikipedia.org/wiki/Byte_order_mark)).
 
 Examples
 --------
@@ -86,14 +82,23 @@ var blob = new Blob(["Hello, world!"], {type: "text/plain;charset=utf-8"});
 FileSaver.saveAs(blob, "hello world.txt");
 ```
 
+### Saving URLs
+
+```js
+FileSaver.saveAs("https://httpbin.org/image", "image.jpg");
+```
+Using URLs within the same origin will just use `a[download]`
+Otherwise, it will first check if it supports cors header with a synchronously head request
+if it does it will download the data and save it using blob URLs
+if not it will try to download it using `a[download]`
+
 The standard W3C File API [`Blob`][4] interface is not available in all browsers.
 [Blob.js][5] is a cross-browser `Blob` implementation that solves this.
 
 ### Saving a canvas
 
 ```js
-var canvas = document.getElementById("my-canvas"), ctx = canvas.getContext("2d");
+var canvas = document.getElementById("my-canvas");
-// draw to canvas...
 canvas.toBlob(function(blob) {
     saveAs(blob, "pretty image.png");
 });
@@ -126,6 +131,8 @@ FileSaver.saveAs(file);
   [4]: https://developer.mozilla.org/en-US/docs/DOM/Blob
   [5]: https://github.com/eligrey/Blob.js
   [6]: https://github.com/eligrey/canvas-toBlob.js
+  [7]: https://github.com/jimmywarting/StreamSaver.js
+  [8]: https://github.com/eligrey/FileSaver.js/wiki/Saving-a-remote-file#using-http-header
 
 Installation
 ------------------

bower.json

@@ -1,7 +1,7 @@
 {
   "name": "file-saver",
-  "main": "dist/FileSaver.js",
+  "main": "dist/FileSaver.min.js",
-  "version": "1.3.8",
+  "version": "2.0.0-rc.3",
   "homepage": "https://github.com/eligrey/FileSaver.js",
   "authors": [
     "Eli Grey <[email protected]>"
@@ -15,7 +15,7 @@
   "license": "MIT",
   "ignore": [
       "*",
-      "!FileSaver.*js",
+      "!dist/*",
       "!LICENSE.md"
   ]
 }

demo/demo.css

@@ -1,50 +0,0 @@
-html {
-	background-color: #DDD;
-}
-body {
-    -webkit-box-sizing: content-box;
-    -moz-box-sizing: content-box;
-    box-sizing: content-box;
-	width: 900px;
-	margin: 0 auto;
-	font-family: Verdana, Helvetica, Arial, sans-serif;
-	-webkit-box-shadow: 0 0 10px 2px rgba(0, 0, 0, .5);
-	-moz-box-shadow: 0 0 10px 2px rgba(0, 0, 0, .5);
-	box-shadow: 0 0 10px 2px rgba(0, 0, 0, .5);
-	padding: 7px 25px 70px;
-	background-color: #FFF;
-}
-h1, h2, h3, h4, h5, h6 {
-	font-family: Georgia, "Times New Roman", serif;
-}
-h2, form {
-	text-align: center;
-}
-form {
-	margin-top: 5px;
-}
-.input {
-	width: 500px;
-	height: 300px;
-	margin: 0 auto;
-	display: block;
-}
-section {
-	margin-top: 40px;
-}
-#canvas {
-	cursor: crosshair;
-}
-#canvas, #html {
-	border: 1px solid #000;
-}
-.filename {
-	text-align: right;
-}
-#html {
-    -webkit-box-sizing: border-box;
-    -moz-box-sizing: border-box;
-    box-sizing: border-box;
-	overflow: auto;
-	padding: 1em;
-}

demo/demo.js

@@ -1,216 +0,0 @@
-/*! FileSaver.js demo script
- *  2016-05-26
- *
- *  By Eli Grey, http://eligrey.com
- *  License: MIT
- *    See LICENSE.md
- */
-
-/*! @source http://purl.eligrey.com/github/FileSaver.js/blob/master/demo/demo.js */
-
-/*jshint laxbreak: true, laxcomma: true, smarttabs: true*/
-/*global saveAs, self*/
-
-(function(view) {
-"use strict";
-// The canvas drawing portion of the demo is based off the demo at
-// http://www.williammalone.com/articles/create-html5-canvas-javascript-drawing-app/
-var
-	  document = view.document
-	, $ = function(id) {
-		return document.getElementById(id);
-	}
-	, session = view.sessionStorage
-	// only get URL when necessary in case Blob.js hasn't defined it yet
-	, get_blob = function() {
-		return view.Blob;
-	}
-
-	, canvas = $("canvas")
-	, canvas_options_form = $("canvas-options")
-	, canvas_filename = $("canvas-filename")
-	, canvas_clear_button = $("canvas-clear")
-
-	, text = $("text")
-	, text_options_form = $("text-options")
-	, text_filename = $("text-filename")
-
-	, html = $("html")
-	, html_options_form = $("html-options")
-	, html_filename = $("html-filename")
-
-	, ctx = canvas.getContext("2d")
-	, drawing = false
-	, x_points = session.x_points || []
-	, y_points = session.y_points || []
-	, drag_points = session.drag_points || []
-	, add_point = function(x, y, dragging) {
-		x_points.push(x);
-		y_points.push(y);
-		drag_points.push(dragging);
-	}
-	, draw = function(){
-		canvas.width = canvas.width;
-		ctx.lineWidth = 6;
-		ctx.lineJoin = "round";
-		ctx.strokeStyle = "#000000";
-		var
-			  i = 0
-			, len = x_points.length
-		;
-		for(; i < len; i++) {
-			ctx.beginPath();
-			if (i && drag_points[i]) {
-				ctx.moveTo(x_points[i-1], y_points[i-1]);
-			} else {
-				ctx.moveTo(x_points[i]-1, y_points[i]);
-			}
-			ctx.lineTo(x_points[i], y_points[i]);
-			ctx.closePath();
-			ctx.stroke();
-		}
-	}
-	, stop_drawing = function() {
-		drawing = false;
-	}
-
-	// Title guesser and document creator available at https://gist.github.com/1059648
-	, guess_title = function(doc) {
-		var
-			  h = "h6 h5 h4 h3 h2 h1".split(" ")
-			, i = h.length
-			, headers
-			, header_text
-		;
-		while (i--) {
-			headers = doc.getElementsByTagName(h[i]);
-			for (var j = 0, len = headers.length; j < len; j++) {
-				header_text = headers[j].textContent.trim();
-				if (header_text) {
-					return header_text;
-				}
-			}
-		}
-	}
-	, doc_impl = document.implementation
-	, create_html_doc = function(html) {
-		var
-			  dt = doc_impl.createDocumentType('html', null, null)
-			, doc = doc_impl.createDocument("http://www.w3.org/1999/xhtml", "html", dt)
-			, doc_el = doc.documentElement
-			, head = doc_el.appendChild(doc.createElement("head"))
-			, charset_meta = head.appendChild(doc.createElement("meta"))
-			, title = head.appendChild(doc.createElement("title"))
-			, body = doc_el.appendChild(doc.createElement("body"))
-			, i = 0
-			, len = html.childNodes.length
-		;
-		charset_meta.setAttribute("charset", html.ownerDocument.characterSet);
-		for (; i < len; i++) {
-			body.appendChild(doc.importNode(html.childNodes.item(i), true));
-		}
-		var title_text = guess_title(doc);
-		if (title_text) {
-			title.appendChild(doc.createTextNode(title_text));
-		}
-		return doc;
-	}
-;
-canvas.width = 500;
-canvas.height = 300;
-
-  if (typeof x_points === "string") {
-	x_points = JSON.parse(x_points);
-} if (typeof y_points === "string") {
-	y_points = JSON.parse(y_points);
-} if (typeof drag_points === "string") {
-	drag_points = JSON.parse(drag_points);
-} if (session.canvas_filename) {
-	canvas_filename.value = session.canvas_filename;
-} if (session.text) {
-	text.value = session.text;
-} if (session.text_filename) {
-	text_filename.value = session.text_filename;
-} if (session.html) {
-	html.innerHTML = session.html;
-} if (session.html_filename) {
-	html_filename.value = session.html_filename;
-}
-
-drawing = true;
-draw();
-drawing = false;
-
-canvas_clear_button.addEventListener("click", function() {
-	canvas.width = canvas.width;
-	x_points.length =
-	y_points.length =
-	drag_points.length =
-		0;
-}, false);
-canvas.addEventListener("mousedown", function(event) {
-	event.preventDefault();
-	drawing = true;
-	add_point(event.pageX - canvas.offsetLeft, event.pageY - canvas.offsetTop, false);
-	draw();
-}, false);
-canvas.addEventListener("mousemove", function(event) {
-	if (drawing) {
-		add_point(event.pageX - canvas.offsetLeft, event.pageY - canvas.offsetTop, true);
-		draw();
-	}
-}, false);
-canvas.addEventListener("mouseup", stop_drawing, false);
-canvas.addEventListener("mouseout", stop_drawing, false);
-
-canvas_options_form.addEventListener("submit", function(event) {
-	event.preventDefault();
-	canvas.toBlobHD(function(blob) {
-		saveAs(
-			  blob
-			, (canvas_filename.value || canvas_filename.placeholder) + ".png"
-		);
-	}, "image/png");
-}, false);
-
-text_options_form.addEventListener("submit", function(event) {
-	event.preventDefault();
-	var BB = get_blob();
-	saveAs(
-		  new BB(
-			  [text.value || text.placeholder]
-			, {type: "text/plain;charset=" + document.characterSet}
-		)
-		, (text_filename.value || text_filename.placeholder) + ".txt"
-	);
-}, false);
-
-html_options_form.addEventListener("submit", function(event) {
-	event.preventDefault();
-	var
-		  BB = get_blob()
-		, xml_serializer = new XMLSerializer()
-		, doc = create_html_doc(html)
-	;
-	saveAs(
-		  new BB(
-			  [xml_serializer.serializeToString(doc)]
-			, {type: "text/plain;charset=" + document.characterSet}
-		)
-		, (html_filename.value || html_filename.placeholder) + ".xhtml"
-	);
-}, false);
-
-view.addEventListener("unload", function() {
-	session.x_points = JSON.stringify(x_points);
-	session.y_points = JSON.stringify(y_points);
-	session.drag_points = JSON.stringify(drag_points);
-	session.canvas_filename = canvas_filename.value;
-
-	session.text = text.value;
-	session.text_filename = text_filename.value;
-
-	session.html = html.innerHTML;
-	session.html_filename = html_filename.value;
-}, false);
-}(self));

demo/demo.min.js

@@ -1,2 +0,0 @@
-/*! @source http://purl.eligrey.com/github/FileSaver.js/blob/master/demo/demo.js */
-(function(n){"use strict";var s=n.document,g=function(A){return s.getElementById(A)},b=n.sessionStorage,x=function(){return n.Blob},f=g("canvas"),r=g("canvas-options"),y=g("canvas-filename"),p=g("canvas-clear"),q=g("text"),t=g("text-options"),h=g("text-filename"),m=g("html"),e=g("html-options"),i=g("html-filename"),u=f.getContext("2d"),z=false,a=b.x_points||[],o=b.y_points||[],d=b.drag_points||[],j=function(A,C,B){a.push(A);o.push(C);d.push(B)},l=function(){f.width=f.width;u.lineWidth=6;u.lineJoin="round";u.strokeStyle="#000000";var B=0,A=a.length;for(;B<A;B++){u.beginPath();if(B&&d[B]){u.moveTo(a[B-1],o[B-1])}else{u.moveTo(a[B]-1,o[B])}u.lineTo(a[B],o[B]);u.closePath();u.stroke()}},c=function(){z=false},w=function(E){var D="h6 h5 h4 h3 h2 h1".split(" "),C=D.length,F,G;while(C--){F=E.getElementsByTagName(D[C]);for(var B=0,A=F.length;B<A;B++){G=F[B].textContent.trim();if(G){return G}}}},v=s.implementation,k=function(D){var B=v.createDocumentType("html",null,null),J=v.createDocument("http://www.w3.org/1999/xhtml","html",B),A=J.documentElement,H=A.appendChild(J.createElement("head")),K=H.appendChild(J.createElement("meta")),I=H.appendChild(J.createElement("title")),E=A.appendChild(J.createElement("body")),C=0,G=D.childNodes.length;K.setAttribute("charset",D.ownerDocument.characterSet);for(;C<G;C++){E.appendChild(J.importNode(D.childNodes.item(C),true))}var F=w(J);if(F){I.appendChild(J.createTextNode(F))}return J};f.width=500;f.height=300;if(typeof a==="string"){a=JSON.parse(a)}if(typeof o==="string"){o=JSON.parse(o)}if(typeof d==="string"){d=JSON.parse(d)}if(b.canvas_filename){y.value=b.canvas_filename}if(b.text){q.value=b.text}if(b.text_filename){h.value=b.text_filename}if(b.html){m.innerHTML=b.html}if(b.html_filename){i.value=b.html_filename}z=true;l();z=false;p.addEventListener("click",function(){f.width=f.width;a.length=o.length=d.length=0},false);f.addEventListener("mousedown",function(A){A.preventDefault();z=true;j(A.pageX-f.offsetLeft,A.pageY-f.offsetTop,false);l()},false);f.addEventListener("mousemove",function(A){if(z){j(A.pageX-f.offsetLeft,A.pageY-f.offsetTop,true);l()}},false);f.addEventListener("mouseup",c,false);f.addEventListener("mouseout",c,false);r.addEventListener("submit",function(A){A.preventDefault();f.toBlobHD(function(B){saveAs(B,(y.value||y.placeholder)+".png")},"image/png")},false);t.addEventListener("submit",function(A){A.preventDefault();var B=x();saveAs(new B([q.value||q.placeholder],{type:"text/plain;charset="+s.characterSet}),(h.value||h.placeholder)+".txt")},false);e.addEventListener("submit",function(B){B.preventDefault();var D=x(),A=new XMLSerializer,C=k(m);saveAs(new D([A.serializeToString(C)],{type:"text/plain;charset="+s.characterSet}),(i.value||i.placeholder)+".xhtml")},false);n.addEventListener("unload",function(){b.x_points=JSON.stringify(a);b.y_points=JSON.stringify(o);b.drag_points=JSON.stringify(d);b.canvas_filename=y.value;b.text=q.value;b.text_filename=h.value;b.html=m.innerHTML;b.html_filename=i.value},false)}(self));

demo/index.xhtml

@@ -1,57 +0,0 @@
-<!DOCTYPE html>
-<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US-x-Hixie">
-<head>
-    <meta charset="utf-8"/>
-    <title>FileSaver.js demo</title>
-    <link rel="stylesheet" type="text/css" href="https://cdn.rawgit.com/eligrey/FileSaver.js/702cd2e820b680f88a0f299e33085c196806fc52/demo/demo.css"/>
-</head>
-<body>
-    <h1><a href="https://github.com/eligrey/FileSaver.js">FileSaver.js</a> demo</h1>
-    <p>
-        The following examples demonstrate how it is possible to generate and save any type of data right in the browser using the <code>saveAs()</code> FileSaver interface, without contacting any servers.
-    </p>
-    <section id="image-demo">
-        <h2>Saving an image</h2>
-        <canvas class="input" id="canvas" width="500" height="300"/>
-        <form id="canvas-options">
-            <label>Filename: <input type="text" class="filename" id="canvas-filename" placeholder="doodle"/>.png</label>
-            <input type="submit" value="Save"/>
-            <input type="button" id="canvas-clear" value="Clear"/>
-        </form>
-    </section>
-    <section id="text-demo">
-        <h2>Saving text</h2>
-        <textarea class="input" id="text" placeholder="Once upon a time..."/>
-        <form id="text-options">
-            <label>Filename: <input type="text" class="filename" id="text-filename" placeholder="a plain document"/>.txt</label>
-            <input type="submit" value="Save"/>
-        </form>
-    </section>
-    <section id="html-demo">
-        <h2>Saving rich text</h2>
-        <div class="input" id="html" contenteditable="">
-            <h3>Some example rich text</h3>
-            <ul>
-                <li><del>Plain</del> <ins>Boring</ins> text.</li>
-                <li><em>Emphasized text!</em></li>
-                <li><strong>Strong text!</strong></li>
-                <li>
-                    <svg xmlns="http://www.w3.org/2000/svg" version="1.1" width="70" height="70">
-                        <circle cx="35" cy="35" r="35" fill="red"/>
-                        <text x="10" y="40">image</text>
-                    </svg>
-                </li>
-                <li><a href="https://github.com/eligrey/FileSaver.js">A link.</a></li>
-            </ul>
-        </div>
-        <form id="html-options">
-            <label>Filename: <input type="text" class="filename" id="html-filename" placeholder="a rich document"/>.xhtml</label>
-            <input type="submit" value="Save"/>
-        </form>
-    </section>
-    <script async="" src="https://cdn.rawgit.com/eligrey/Blob.js/0cef2746414269b16834878a8abc52eb9d53e6bd/Blob.js"/>
-    <script async="" src="https://cdn.rawgit.com/eligrey/canvas-toBlob.js/f1a01896135ab378aa5c0118eadd81da55e698d8/canvas-toBlob.js"/>
-    <script async="" src="https://cdn.rawgit.com/eligrey/FileSaver.js/e9d941381475b5df8b7d7691013401e171014e89/FileSaver.min.js"/>
-    <script async="" src="https://cdn.rawgit.com/eligrey/FileSaver.js/597b6cd0207ce408a6d34890b5b2826b13450714/demo/demo.js"/>
-</body>
-</html>

dist/FileSaver.js

@@ -0,0 +1,180 @@
+(function (global, factory) {
+  if (typeof define === "function" && define.amd) {
+    define([], factory);
+  } else if (typeof exports !== "undefined") {
+    factory();
+  } else {
+    var mod = {
+      exports: {}
+    };
+    factory();
+    global.FileSaver = mod.exports;
+  }
+})(this, function () {
+  "use strict";
+
+  /*
+  * FileSaver.js
+  * A saveAs() FileSaver implementation.
+  *
+  * By Eli Grey, http://eligrey.com
+  *
+  * License : https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md (MIT)
+  * source  : http://purl.eligrey.com/github/FileSaver.js
+  */
+  // The one and only way of getting global scope in all environments
+  // https://stackoverflow.com/q/3277182/1008999
+  var _global = typeof window === 'object' && window.window === window ? window : typeof self === 'object' && self.self === self ? self : typeof global === 'object' && global.global === global ? global : void 0;
+
+  function bom(blob, opts) {
+    if (typeof opts === 'undefined') opts = {
+      autoBom: false
+    };else if (typeof opts !== 'object') {
+      console.warn('Depricated: Expected third argument to be a object');
+      opts = {
+        autoBom: !opts
+      };
+    } // prepend BOM for UTF-8 XML and text/* types (including HTML)
+    // note: your browser will automatically convert UTF-16 U+FEFF to EF BB BF
+
+    if (opts.autoBom && /^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
+      return new Blob([String.fromCharCode(0xFEFF), blob], {
+        type: blob.type
+      });
+    }
+
+    return blob;
+  }
+
+  function download(url, name, opts) {
+    var xhr = new XMLHttpRequest();
+    xhr.open('GET', url);
+    xhr.responseType = 'blob';
+
+    xhr.onload = function () {
+      saveAs(xhr.response, name, opts);
+    };
+
+    xhr.onerror = function () {
+      console.error('could not download file');
+    };
+
+    xhr.send();
+  }
+
+  function corsEnabled(url) {
+    var xhr = new XMLHttpRequest(); // use sync to avoid popup blocker
+
+    xhr.open('HEAD', url, false);
+    xhr.send();
+    return xhr.status >= 200 && xhr.status <= 299;
+  } // `a.click()` doesn't work for all browsers (#465)
+
+
+  function click(node) {
+    try {
+      node.dispatchEvent(new MouseEvent('click'));
+    } catch (e) {
+      var evt = document.createEvent('MouseEvents');
+      evt.initMouseEvent('click', true, true, window, 0, 0, 0, 80, 20, false, false, false, false, 0, null);
+      node.dispatchEvent(evt);
+    }
+  }
+
+  var saveAs = _global.saveAs || // probably in some web worker
+  typeof window !== 'object' || window !== _global ? function saveAs() {}
+  /* noop */
+  // Use download attribute first if possible (#193 Lumia mobile)
+  : 'download' in HTMLAnchorElement.prototype ? function saveAs(blob, name, opts) {
+    var URL = _global.URL || _global.webkitURL;
+    var a = document.createElement('a');
+    name = name || blob.name || 'download';
+    a.download = name;
+    a.rel = 'noopener'; // tabnabbing
+    // TODO: detect chrome extensions & packaged apps
+    // a.target = '_blank'
+
+    if (typeof blob === 'string') {
+      // Support regular links
+      a.href = blob;
+
+      if (a.origin !== location.origin) {
+        corsEnabled(a.href) ? download(blob, name, opts) : click(a, a.target = '_blank');
+      } else {
+        click(a);
+      }
+    } else {
+      // Support blobs
+      a.href = URL.createObjectURL(blob);
+      setTimeout(function () {
+        URL.revokeObjectURL(a.href);
+      }, 4E4); // 40s
+
+      setTimeout(function () {
+        click(a);
+      }, 0);
+    }
+  } // Use msSaveOrOpenBlob as a second approach
+  : 'msSaveOrOpenBlob' in navigator ? function saveAs(blob, name, opts) {
+    name = name || blob.name || 'download';
+
+    if (typeof blob === 'string') {
+      if (corsEnabled(blob)) {
+        download(blob, name, opts);
+      } else {
+        var a = document.createElement('a');
+        a.href = blob;
+        a.target = '_blank';
+        setTimeout(function () {
+          click(a);
+        });
+      }
+    } else {
+      navigator.msSaveOrOpenBlob(bom(blob, opts), name);
+    }
+  } // Fallback to using FileReader and a popup
+  : function saveAs(blob, name, opts, popup) {
+    // Open a popup immediately do go around popup blocker
+    // Mostly only avalible on user interaction and the fileReader is async so...
+    popup = popup || open('', '_blank');
+
+    if (popup) {
+      popup.document.title = popup.document.body.innerText = 'downloading...';
+    }
+
+    if (typeof blob === 'string') return download(blob, name, opts);
+    var force = blob.type === 'application/octet-stream';
+
+    var isSafari = /constructor/i.test(_global.HTMLElement) || _global.safari;
+
+    var isChromeIOS = /CriOS\/[\d]+/.test(navigator.userAgent);
+
+    if ((isChromeIOS || force && isSafari) && typeof FileReader === 'object') {
+      // Safari doesn't allow downloading of blob urls
+      var reader = new FileReader();
+
+      reader.onloadend = function () {
+        var url = reader.result;
+        url = isChromeIOS ? url : url.replace(/^data:[^;]*;/, 'data:attachment/file;');
+        if (popup) popup.location.href = url;else location = url;
+        popup = null; // reverse-tabnabbing #460
+      };
+
+      reader.readAsDataURL(blob);
+    } else {
+      var URL = _global.URL || _global.webkitURL;
+      var url = URL.createObjectURL(blob);
+      if (popup) popup.location = url;else location.href = url;
+      popup = null; // reverse-tabnabbing #460
+
+      setTimeout(function () {
+        URL.revokeObjectURL(url);
+      }, 4E4); // 40s
+    }
+  };
+  _global.saveAs = saveAs.saveAs = saveAs;
+
+  if (typeof module !== 'undefined') {
+    module.exports = saveAs;
+  }
+});

dist/FileSaver.min.js

@@ -0,0 +1,3 @@
+(function(a,b){if("function"==typeof define&&define.amd)define([],b);else if("undefined"!=typeof exports)b();else{b(),a.FileSaver={exports:{}}.exports}})(this,function(){"use strict";function b(a,b){return"undefined"==typeof b?b={autoBom:!1}:"object"!=typeof b&&(console.warn("Depricated: Expected third argument to be a object"),b={autoBom:!b}),b.autoBom&&/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(a.type)?new Blob(["\uFEFF",a],{type:a.type}):a}function c(b,c,d){var e=new XMLHttpRequest;e.open("GET",b),e.responseType="blob",e.onload=function(){a(e.response,c,d)},e.onerror=function(){console.error("could not download file")},e.send()}function d(a){var b=new XMLHttpRequest;return b.open("HEAD",a,!1),b.send(),200<=b.status&&299>=b.status}function e(a){try{a.dispatchEvent(new MouseEvent("click"))}catch(c){var b=document.createEvent("MouseEvents");b.initMouseEvent("click",!0,!0,window,0,0,0,80,20,!1,!1,!1,!1,0,null),a.dispatchEvent(b)}}var f="object"==typeof window&&window.window===window?window:"object"==typeof self&&self.self===self?self:"object"==typeof global&&global.global===global?global:void 0,a=f.saveAs||"object"!=typeof window||window!==f?function(){}:"download"in HTMLAnchorElement.prototype?function(b,g,h){var i=f.URL||f.webkitURL,j=document.createElement("a");g=g||b.name||"download",j.download=g,j.rel="noopener","string"==typeof b?(j.href=b,j.origin===location.origin?e(j):d(j.href)?c(b,g,h):e(j,j.target="_blank")):(j.href=i.createObjectURL(b),setTimeout(function(){i.revokeObjectURL(j.href)},4E4),setTimeout(function(){e(j)},0))}:"msSaveOrOpenBlob"in navigator?function(f,g,h){if(g=g||f.name||"download","string"!=typeof f)navigator.msSaveOrOpenBlob(b(f,h),g);else if(d(f))c(f,g,h);else{var i=document.createElement("a");i.href=f,i.target="_blank",setTimeout(function(){e(i)})}}:function(a,b,d,e){if(e=e||open("","_blank"),e&&(e.document.title=e.document.body.innerText="downloading..."),"string"==typeof a)return c(a,b,d);var g="application/octet-stream"===a.type,h=/constructor/i.test(f.HTMLElement)||f.safari,i=/CriOS\/[\d]+/.test(navigator.userAgent);if((i||g&&h)&&"object"==typeof FileReader){var j=new FileReader;j.onloadend=function(){var a=j.result;a=i?a:a.replace(/^data:[^;]*;/,"data:attachment/file;"),e?e.location.href=a:location=a,e=null},j.readAsDataURL(a)}else{var k=f.URL||f.webkitURL,l=k.createObjectURL(a);e?e.location=l:location.href=l,e=null,setTimeout(function(){k.revokeObjectURL(l)},4E4)}};f.saveAs=a.saveAs=a,"undefined"!=typeof module&&(module.exports=a)});
+
+//# sourceMappingURL=FileSaver.min.js.map

package.json

@@ -1,18 +1,18 @@
 {
   "name": "file-saver",
-  "version": "1.3.8",
+  "version": "2.0.0",
   "description": "An HTML5 saveAs() FileSaver implementation",
-  "main": "dist/FileSaver.js",
+  "main": "dist/FileSaver.min.js",
-  "module": "src/FileSaver.js",
   "files": [
     "dist/FileSaver.js",
     "dist/FileSaver.min.js",
+    "dist/FileSaver.min.js.map",
     "src/FileSaver.js"
   ],
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 0",
-    "build:development": "mkdir -p dist && babel src/FileSaver.js --out-file=dist/FileSaver.js",
+    "build:development": "babel -o dist/FileSaver.js --plugins @babel/plugin-transform-modules-umd src/FileSaver.js",
-    "build:production": "NODE_ENV=production npm run build:development -- --out-file=dist/FileSaver.min.js",
+    "build:production": "babel -o dist/FileSaver.min.js -s --plugins @babel/plugin-transform-modules-umd --presets minify src/FileSaver.js",
     "build": "npm run build:development && npm run build:production",
     "prepublishOnly": "npm run build"
   },
@@ -32,9 +32,9 @@
   },
   "homepage": "https://github.com/eligrey/FileSaver.js#readme",
   "devDependencies": {
-    "babel-cli": "^6.26.0",
+    "@babel/cli": "^7.1.0",
-    "babel-plugin-transform-es2015-modules-umd": "^6.24.1",
+    "@babel/core": "^7.1.0",
-    "babel-preset-env": "^1.6.1",
+    "@babel/plugin-transform-modules-umd": "^7.1.0",
-    "babel-preset-minify": "^0.2.0"
+    "babel-preset-minify": "^0.4.3"
   }
 }

src/FileSaver.js

@@ -1,182 +1,164 @@
-/* FileSaver.js
+/*
- * A saveAs() FileSaver implementation.
+* FileSaver.js
- * 1.3.8
+* A saveAs() FileSaver implementation.
- * 2018-03-22 14:03:47
+*
- *
+* By Eli Grey, http://eligrey.com
- * By Eli Grey, https://eligrey.com
+*
- * License: MIT
+* License : https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md (MIT)
- *   See https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md
+* source  : http://purl.eligrey.com/github/FileSaver.js
- */
+*/
 
-/*global self */
-/*jslint bitwise: true, indent: 4, laxbreak: true, laxcomma: true, smarttabs: true, plusplus: true */
 
-/*! @source http://purl.eligrey.com/github/FileSaver.js/blob/master/src/FileSaver.js */
+// The one and only way of getting global scope in all environments
+// https://stackoverflow.com/q/3277182/1008999
+var _global = typeof window === 'object' && window.window === window
+  ? window : typeof self === 'object' && self.self === self
+  ? self : typeof global === 'object' && global.global === global
+  ? global
+  : this
 
-export var saveAs = saveAs || (function(view) {
+function bom (blob, opts) {
-	"use strict";
+  if (typeof opts === 'undefined') opts = { autoBom: false }
-	// IE <10 is explicitly unsupported
+  else if (typeof opts !== 'object') {
-	if (typeof view === "undefined" || typeof navigator !== "undefined" && /MSIE [1-9]\./.test(navigator.userAgent)) {
+    console.warn('Depricated: Expected third argument to be a object')
-		return;
+    opts = { autoBom: !opts }
-	}
+  }
-	var
-		  doc = view.document
-		  // only get URL when necessary in case Blob.js hasn't overridden it yet
-		, get_URL = function() {
-			return view.URL || view.webkitURL || view;
-		}
-		, save_link = doc.createElementNS("http://www.w3.org/1999/xhtml", "a")
-		, can_use_save_link = "download" in save_link
-		, click = function(node) {
-			var event = new MouseEvent("click");
-			node.dispatchEvent(event);
-		}
-		, is_safari = /constructor/i.test(view.HTMLElement) || view.safari
-		, is_chrome_ios =/CriOS\/[\d]+/.test(navigator.userAgent)
-		, setImmediate = view.setImmediate || view.setTimeout
-		, throw_outside = function(ex) {
-			setImmediate(function() {
-				throw ex;
-			}, 0);
-		}
-		, force_saveable_type = "application/octet-stream"
-		// the Blob API is fundamentally broken as there is no "downloadfinished" event to subscribe to
-		, arbitrary_revoke_timeout = 1000 * 40 // in ms
-		, revoke = function(file) {
-			var revoker = function() {
-				if (typeof file === "string") { // file is an object URL
-					get_URL().revokeObjectURL(file);
-				} else { // file is a File
-					file.remove();
-				}
-			};
-			setTimeout(revoker, arbitrary_revoke_timeout);
-		}
-		, dispatch = function(filesaver, event_types, event) {
-			event_types = [].concat(event_types);
-			var i = event_types.length;
-			while (i--) {
-				var listener = filesaver["on" + event_types[i]];
-				if (typeof listener === "function") {
-					try {
-						listener.call(filesaver, event || filesaver);
-					} catch (ex) {
-						throw_outside(ex);
-					}
-				}
-			}
-		}
-		, auto_bom = function(blob) {
-			// prepend BOM for UTF-8 XML and text/* types (including HTML)
-			// note: your browser will automatically convert UTF-16 U+FEFF to EF BB BF
-			if (/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
-				return new Blob([String.fromCharCode(0xFEFF), blob], {type: blob.type});
-			}
-			return blob;
-		}
-		, FileSaver = function(blob, name, no_auto_bom) {
-			if (!no_auto_bom) {
-				blob = auto_bom(blob);
-			}
-			// First try a.download, then web filesystem, then object URLs
-			var
-				  filesaver = this
-				, type = blob.type
-				, force = type === force_saveable_type
-				, object_url
-				, dispatch_all = function() {
-					dispatch(filesaver, "writestart progress write writeend".split(" "));
-				}
-				// on any filesys errors revert to saving with object URLs
-				, fs_error = function() {
-					if ((is_chrome_ios || (force && is_safari)) && view.FileReader) {
-						// Safari doesn't allow downloading of blob urls
-						var reader = new FileReader();
-						reader.onloadend = function() {
-							var url = is_chrome_ios ? reader.result : reader.result.replace(/^data:[^;]*;/, 'data:attachment/file;');
-							var popup = view.open(url, '_blank');
-							if(!popup) view.location.href = url;
-							url=undefined; // release reference before dispatching
-							filesaver.readyState = filesaver.DONE;
-							dispatch_all();
-						};
-						reader.readAsDataURL(blob);
-						filesaver.readyState = filesaver.INIT;
-						return;
-					}
-					// don't create more object URLs than needed
-					if (!object_url) {
-						object_url = get_URL().createObjectURL(blob);
-					}
-					if (force) {
-						view.location.href = object_url;
-					} else {
-						var opened = view.open(object_url, "_blank");
-						if (!opened) {
-							// Apple does not allow window.open, see https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/WorkingwithWindowsandTabs/WorkingwithWindowsandTabs.html
-							view.location.href = object_url;
-						}
-					}
-					filesaver.readyState = filesaver.DONE;
-					dispatch_all();
-					revoke(object_url);
-				}
-			;
-			filesaver.readyState = filesaver.INIT;
 
-			if (can_use_save_link) {
+  // prepend BOM for UTF-8 XML and text/* types (including HTML)
-				object_url = get_URL().createObjectURL(blob);
+  // note: your browser will automatically convert UTF-16 U+FEFF to EF BB BF
-				setImmediate(function() {
+  if (opts.autoBom && /^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
-					save_link.href = object_url;
+    return new Blob([String.fromCharCode(0xFEFF), blob], { type: blob.type })
-					save_link.download = name;
+  }
-					click(save_link);
+  return blob
-					dispatch_all();
+}
-					revoke(object_url);
-					filesaver.readyState = filesaver.DONE;
-				}, 0);
-				return;
-			}
 
-			fs_error();
+function download (url, name, opts) {
-		}
+  var xhr = new XMLHttpRequest()
-		, FS_proto = FileSaver.prototype
+  xhr.open('GET', url)
-		, saveAs = function(blob, name, no_auto_bom) {
+  xhr.responseType = 'blob'
-			return new FileSaver(blob, name || blob.name || "download", no_auto_bom);
+  xhr.onload = function () {
-		}
+    saveAs(xhr.response, name, opts)
-	;
+  }
+  xhr.onerror = function () {
+    console.error('could not download file')
+  }
+  xhr.send()
+}
 
-	// IE 10+ (native saveAs)
+function corsEnabled (url) {
-	if (typeof navigator !== "undefined" && navigator.msSaveOrOpenBlob) {
+  var xhr = new XMLHttpRequest()
-		return function(blob, name, no_auto_bom) {
+  // use sync to avoid popup blocker
-			name = name || blob.name || "download";
+  xhr.open('HEAD', url, false)
+  xhr.send()
+  return xhr.status >= 200 && xhr.status <= 299
+}
 
-			if (!no_auto_bom) {
+// `a.click()` doesn't work for all browsers (#465)
-				blob = auto_bom(blob);
+function click(node) {
-			}
+  try {
-			return navigator.msSaveOrOpenBlob(blob, name);
+    node.dispatchEvent(new MouseEvent('click'))
-		};
+  } catch (e) {
-	}
+    var evt = document.createEvent('MouseEvents')
+    evt.initMouseEvent('click', true, true, window, 0, 0, 0, 80,
+                          20, false, false, false, false, 0, null)
+    node.dispatchEvent(evt)
+  }
+}
 
-	// todo: detect chrome extensions & packaged apps
+var saveAs = _global.saveAs ||
-	//save_link.target = "_blank";
+// probably in some web worker
+(typeof window !== 'object' || window !== _global)
+  ? function saveAs () { /* noop */ }
 
-	FS_proto.abort = function(){};
+// Use download attribute first if possible (#193 Lumia mobile)
-	FS_proto.readyState = FS_proto.INIT = 0;
+: 'download' in HTMLAnchorElement.prototype
-	FS_proto.WRITING = 1;
+? function saveAs (blob, name, opts) {
-	FS_proto.DONE = 2;
+  var URL = _global.URL || _global.webkitURL
+  var a = document.createElement('a')
+  name = name || blob.name || 'download'
 
-	FS_proto.error =
+  a.download = name
-	FS_proto.onwritestart =
+  a.rel = 'noopener' // tabnabbing
-	FS_proto.onprogress =
-	FS_proto.onwrite =
-	FS_proto.onabort =
-	FS_proto.onerror =
-	FS_proto.onwriteend =
-		null;
 
-	return saveAs;
+  // TODO: detect chrome extensions & packaged apps
-}(
+  // a.target = '_blank'
-	   typeof self !== "undefined" && self
+
-	|| typeof window !== "undefined" && window
+  if (typeof blob === 'string') {
-	|| this
+    // Support regular links
-));
+    a.href = blob
+    if (a.origin !== location.origin) {
+      corsEnabled(a.href)
+        ? download(blob, name, opts)
+        : click(a, a.target = '_blank')
+    } else {
+      click(a)
+    }
+  } else {
+    // Support blobs
+    a.href = URL.createObjectURL(blob)
+    setTimeout(function () { URL.revokeObjectURL(a.href) }, 4E4) // 40s
+    setTimeout(function () { click(a) }, 0)
+  }
+}
+
+// Use msSaveOrOpenBlob as a second approach
+: 'msSaveOrOpenBlob' in navigator
+? function saveAs (blob, name, opts) {
+  name = name || blob.name || 'download'
+
+  if (typeof blob === 'string') {
+    if (corsEnabled(blob)) {
+      download(blob, name, opts)
+    } else {
+      var a = document.createElement('a')
+      a.href = blob
+      a.target = '_blank'
+      setTimeout(function () { click(a) })
+    }
+  } else {
+    navigator.msSaveOrOpenBlob(bom(blob, opts), name)
+  }
+}
+
+// Fallback to using FileReader and a popup
+: function saveAs (blob, name, opts, popup) {
+  // Open a popup immediately do go around popup blocker
+  // Mostly only avalible on user interaction and the fileReader is async so...
+  popup = popup || open('', '_blank')
+  if (popup) {
+    popup.document.title =
+    popup.document.body.innerText = 'downloading...'
+  }
+
+  if (typeof blob === 'string') return download(blob, name, opts)
+
+  var force = blob.type === 'application/octet-stream'
+  var isSafari = /constructor/i.test(_global.HTMLElement) || _global.safari
+  var isChromeIOS = /CriOS\/[\d]+/.test(navigator.userAgent)
+
+  if ((isChromeIOS || (force && isSafari)) && typeof FileReader === 'object') {
+    // Safari doesn't allow downloading of blob urls
+    var reader = new FileReader()
+    reader.onloadend = function () {
+      var url = reader.result
+      url = isChromeIOS ? url : url.replace(/^data:[^;]*;/, 'data:attachment/file;')
+      if (popup) popup.location.href = url
+      else location = url
+      popup = null // reverse-tabnabbing #460
+    }
+    reader.readAsDataURL(blob)
+  } else {
+    var URL = _global.URL || _global.webkitURL
+    var url = URL.createObjectURL(blob)
+    if (popup) popup.location = url
+    else location.href = url
+    popup = null // reverse-tabnabbing #460
+    setTimeout(function () { URL.revokeObjectURL(url) }, 4E4) // 40s
+  }
+}
+
+_global.saveAs = saveAs.saveAs = saveAs
+
+if (typeof module !== 'undefined') {
+  module.exports = saveAs;
+}