Removed eval

closes #491

CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [2.0.0] - 2018-10-17
+
+- Removed eval to resolve CSP [#465]
+
+## [2.0.0-rc.4] - 2018-10-17
+
+- Don’t throw on module.exports
+
+## [2.0.0-rc.3] - 2018-09-27
+
+- Switch export method
+
+## [2.0.0-rc.2] - 2018-09-26
+
+- Added a changelog.md
+- Reverted `a.click()` to use dispatch with a try-catch ([#465], [#382])
+- Made third argument to an object where you have to pass `{ autoBom: true }`
+  - boolean are depricated but still works
+
+## [2.0.0-rc.1] - 2018-09-26
+
+- saveAs don't return anything
+  - The object that dispatched `writestart progress write writeend` are gone
+  - detecting such features was never possible and nobody seems to use it.
+- Removed the demo folder
+- Removed date/version from top of the file
+- Dosen't crash in web workers ([#449])
+- Support saving urls ([#260] with workarounds for cross origin)
+- Uses babel universal module pattern (UMD) to export the package
+- Provides source map now as well.
+- use a[download] before msSaveAs ([#193], [#294])
+- removed dist from .gitignore (npm uses it if it don't find a .npmignore)
+- autoBom is now reversed so you have to tell when you want to use autoBom ([#432])
+- `a.click()` since there are new and depricated event constructors that works differently ([#382])
+- opens up a new popup (tab) directly for the fallback method since the FileReader is async
+- removed the explicitly MSIE [1-9] check
+- Uses new anchor link for each save (might solve multiple download problems)
+
+  [#382]: https://github.com/eligrey/FileSaver.js/issues/382
+  [#449]: https://github.com/eligrey/FileSaver.js/issues/449
+  [#260]: https://github.com/eligrey/FileSaver.js/issues/260
+  [#193]: https://github.com/eligrey/FileSaver.js/issues/193
+  [#294]: https://github.com/eligrey/FileSaver.js/issues/294
+  [#432]: https://github.com/eligrey/FileSaver.js/issues/432
+  [#382]: https://github.com/eligrey/FileSaver.js/issues/382
+  [#465]: https://github.com/eligrey/FileSaver.js/issues/465
+  [#469]: https://github.com/eligrey/FileSaver.js/issues/469
+  [#470]: https://github.com/eligrey/FileSaver.js/issues/470
+  [#491]: https://github.com/eligrey/FileSaver.js/issues/491

README.md

@@ -1,23 +1,19 @@
 If you need to save really large files bigger then the blob's size limitation or don't have
-enough RAM, then have a look at the more advanced [StreamSaver.js](https://github.com/jimmywarting/StreamSaver.js)
+enough RAM, then have a look at the more advanced [StreamSaver.js][7]
 that can save data directly to the hard drive asynchronously with the power of the new streams API. That will have
 support for progress, cancelation and knowing when it's done writing
 
 FileSaver.js
 ============
 
-FileSaver.js implements the `saveAs()` FileSaver interface in browsers that do
-not natively support it. There is a [FileSaver.js demo][1] that demonstrates saving
-various media types.
-
 FileSaver.js is the solution to saving files on the client-side, and is perfect for
-webapps that need to generate files, or for saving sensitive information that shouldn't be
+web apps that generates files on the client, However if the file is coming from the
-sent to an external server.
+server we recommend you to first try to use [Content-Disposition][8] attachment response header as it has more cross-browser compatible
 
 Looking for `canvas.toBlob()` for saving canvases? Check out
 [canvas-toBlob.js][2] for a cross-browser implementation.
 
-Supported browsers
+Supported Browsers
 ------------------
 
 | Browser        | Constructs as | Filenames    | Max Blob Size | Dependencies |
@@ -60,14 +56,14 @@ Syntax
 ------
 ### Import saveAs() from file-saver
 ```js
-import { saveAs } from 'file-saver/FileSaver';
+import saveAs from 'file-saver';
 ```
 
 ```js
-FileSaver saveAs(Blob/File/Url, optional DOMString filename, optional Boolean autoBOM)
+FileSaver saveAs(Blob/File/Url, optional DOMString filename, optional Object { autoBOM })
 ```
 
-Pass `true` for `autoBOM` if you don't want FileSaver.js to automatically provide Unicode text encoding hints (see: [byte order mark](https://en.wikipedia.org/wiki/Byte_order_mark)).
+Pass `{ autoBOM: true }` if you want FileSaver.js to automatically provide Unicode text encoding hints (see: [byte order mark](https://en.wikipedia.org/wiki/Byte_order_mark)).
 
 Examples
 --------
@@ -86,14 +82,14 @@ var blob = new Blob(["Hello, world!"], {type: "text/plain;charset=utf-8"});
 FileSaver.saveAs(blob, "hello world.txt");
 ```
 
-### Saving urls
+### Saving URLs
 
 ```js
 FileSaver.saveAs("https://httpbin.org/image", "image.jpg");
 ```
-Using urls within the same origin will just use `a[download]`
+Using URLs within the same origin will just use `a[download]`
-Otherwise it will first check if it supports cors header with a synchronously head request
+Otherwise, it will first check if it supports cors header with a synchronously head request
-if it dose it will download the data and save it using blob urls
+if it does it will download the data and save it using blob URLs
 if not it will try to download it using `a[download]`
 
 The standard W3C File API [`Blob`][4] interface is not available in all browsers.
@@ -102,8 +98,7 @@ The standard W3C File API [`Blob`][4] interface is not available in all browsers
 ### Saving a canvas
 
 ```js
-var canvas = document.getElementById("my-canvas"), ctx = canvas.getContext("2d");
+var canvas = document.getElementById("my-canvas");
-// draw to canvas...
 canvas.toBlob(function(blob) {
     saveAs(blob, "pretty image.png");
 });
@@ -136,6 +131,8 @@ FileSaver.saveAs(file);
   [4]: https://developer.mozilla.org/en-US/docs/DOM/Blob
   [5]: https://github.com/eligrey/Blob.js
   [6]: https://github.com/eligrey/canvas-toBlob.js
+  [7]: https://github.com/jimmywarting/StreamSaver.js
+  [8]: https://github.com/eligrey/FileSaver.js/wiki/Saving-a-remote-file#using-http-header
 
 Installation
 ------------------

bower.json

@@ -1,7 +1,7 @@
 {
   "name": "file-saver",
   "main": "dist/FileSaver.min.js",
-  "version": "2.0.0-rc.1",
+  "version": "2.0.0-rc.3",
   "homepage": "https://github.com/eligrey/FileSaver.js",
   "authors": [
     "Eli Grey <[email protected]>"
@@ -15,8 +15,7 @@
   "license": "MIT",
   "ignore": [
       "*",
-      "!FileSaver.*js",
+      "!dist/*",
-      "!FileSaver.*map",
       "!LICENSE.md"
   ]
 }

dist/FileSaver.js

@@ -1,23 +1,18 @@
 (function (global, factory) {
   if (typeof define === "function" && define.amd) {
-    define(["exports"], factory);
+    define([], factory);
   } else if (typeof exports !== "undefined") {
-    factory(exports);
+    factory();
   } else {
     var mod = {
       exports: {}
     };
-    factory(mod.exports);
+    factory();
     global.FileSaver = mod.exports;
   }
-})(this, function (_exports) {
+})(this, function () {
   "use strict";
 
-  Object.defineProperty(_exports, "__esModule", {
-    value: true
-  });
-  _exports.default = void 0;
-
   /*
   * FileSaver.js
   * A saveAs() FileSaver implementation.
@@ -27,24 +22,22 @@
   * License : https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md (MIT)
   * source  : http://purl.eligrey.com/github/FileSaver.js
   */
-  // The one and only way of getting global scope in all enviorment
+  // The one and only way of getting global scope in all environments
   // https://stackoverflow.com/q/3277182/1008999
-  var _global = function () {
+  var _global = typeof window === 'object' && window.window === window ? window : typeof self === 'object' && self.self === self ? self : typeof global === 'object' && global.global === global ? global : void 0;
-    // some use content security policy to disable eval
-    try {
-      return Function('return this')() || (42, eval)('this');
-    } catch (e) {
-      // every global should have circular reference
-      // used for checking if someone writes var window = {}; var self = {}
-      return typeof window === 'object' && window.window === window ? window : typeof self === 'object' && self.self === self ? self : typeof global === 'object' && global.global === global ? global : this;
-    }
-  }();
 
-  function bom(blob, autoBom) {
+  function bom(blob, opts) {
-    if (!autoBom) return blob; // prepend BOM for UTF-8 XML and text/* types (including HTML)
+    if (typeof opts === 'undefined') opts = {
+      autoBom: false
+    };else if (typeof opts !== 'object') {
+      console.warn('Depricated: Expected third argument to be a object');
+      opts = {
+        autoBom: !opts
+      };
+    } // prepend BOM for UTF-8 XML and text/* types (including HTML)
     // note: your browser will automatically convert UTF-16 U+FEFF to EF BB BF
 
-    if (/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
+    if (opts.autoBom && /^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
       return new Blob([String.fromCharCode(0xFEFF), blob], {
         type: blob.type
       });
@@ -53,13 +46,13 @@
     return blob;
   }
 
-  function download(url, name, autoBom) {
+  function download(url, name, opts) {
     var xhr = new XMLHttpRequest();
     xhr.open('GET', url);
     xhr.responseType = 'blob';
 
     xhr.onload = function () {
-      saveAs(xhr.response, name, autoBom);
+      saveAs(xhr.response, name, opts);
     };
 
     xhr.onerror = function () {
@@ -75,13 +68,24 @@
     xhr.open('HEAD', url, false);
     xhr.send();
     return xhr.status >= 200 && xhr.status <= 299;
+  } // `a.click()` doesn't work for all browsers (#465)
+
+
+  function click(node) {
+    try {
+      node.dispatchEvent(new MouseEvent('click'));
+    } catch (e) {
+      var evt = document.createEvent('MouseEvents');
+      evt.initMouseEvent('click', true, true, window, 0, 0, 0, 80, 20, false, false, false, false, 0, null);
+      node.dispatchEvent(evt);
+    }
   }
 
   var saveAs = _global.saveAs || // probably in some web worker
   typeof window !== 'object' || window !== _global ? function saveAs() {}
   /* noop */
   // Use download attribute first if possible (#193 Lumia mobile)
-  : 'download' in HTMLAnchorElement.prototype ? function saveAs(blob, name, autoBom) {
+  : 'download' in HTMLAnchorElement.prototype ? function saveAs(blob, name, opts) {
     var URL = _global.URL || _global.webkitURL;
     var a = document.createElement('a');
     name = name || blob.name || 'download';
@@ -95,9 +99,9 @@
       a.href = blob;
 
       if (a.origin !== location.origin) {
-        corsEnabled(a.href) ? download(blob, name, autoBom) : a.click(a.target = '_blank');
+        corsEnabled(a.href) ? download(blob, name, opts) : click(a, a.target = '_blank');
       } else {
-        a.click();
+        click(a);
       }
     } else {
       // Support blobs
@@ -106,26 +110,30 @@
         URL.revokeObjectURL(a.href);
       }, 4E4); // 40s
 
-      setTimeout(a.click.bind(a), 0);
+      setTimeout(function () {
+        click(a);
+      }, 0);
     }
-  } // Use msSaveOrOpenBlob as a second approch
+  } // Use msSaveOrOpenBlob as a second approach
-  : 'msSaveOrOpenBlob' in navigator ? function saveAs(blob, name, autoBom) {
+  : 'msSaveOrOpenBlob' in navigator ? function saveAs(blob, name, opts) {
     name = name || blob.name || 'download';
 
     if (typeof blob === 'string') {
       if (corsEnabled(blob)) {
-        download(blob, name, autoBom);
+        download(blob, name, opts);
       } else {
         var a = document.createElement('a');
         a.href = blob;
         a.target = '_blank';
-        setTimeout(a.click.bind(a));
+        setTimeout(function () {
+          click(a);
+        });
       }
     } else {
-      navigator.msSaveOrOpenBlob(bom(blob, autoBom), name);
+      navigator.msSaveOrOpenBlob(bom(blob, opts), name);
     }
   } // Fallback to using FileReader and a popup
-  : function saveAs(blob, name, autoBom, popup) {
+  : function saveAs(blob, name, opts, popup) {
     // Open a popup immediately do go around popup blocker
     // Mostly only avalible on user interaction and the fileReader is async so...
     popup = popup || open('', '_blank');
@@ -134,7 +142,7 @@
       popup.document.title = popup.document.body.innerText = 'downloading...';
     }
 
-    if (typeof blob === 'string') return download(blob, name, autoBom);
+    if (typeof blob === 'string') return download(blob, name, opts);
     var force = blob.type === 'application/octet-stream';
 
     var isSafari = /constructor/i.test(_global.HTMLElement) || _global.safari;
@@ -164,7 +172,9 @@
       }, 4E4); // 40s
     }
   };
-  _global.saveAs = saveAs;
+  _global.saveAs = saveAs.saveAs = saveAs;
-  var _default = saveAs;
+
-  _exports.default = _default;
+  if (typeof module !== 'undefined') {
+    module.exports = saveAs;
+  }
 });

dist/FileSaver.min.js

@@ -1,3 +1,3 @@
-(function(a,b){if("function"==typeof define&&define.amd)define(["exports"],b);else if("undefined"!=typeof exports)b(exports);else{var c={exports:{}};b(c.exports),a.FileSaver=c.exports}})(this,function(a){"use strict";function b(a,b){return b?/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(a.type)?new Blob(["\uFEFF",a],{type:a.type}):a:a}function c(a,b,c){var d=new XMLHttpRequest;d.open("GET",a),d.responseType="blob",d.onload=function(){f(d.response,b,c)},d.onerror=function(){console.error("could not download file")},d.send()}function d(a){var b=new XMLHttpRequest;return b.open("HEAD",a,!1),b.send(),200<=b.status&&299>=b.status}Object.defineProperty(a,"__esModule",{value:!0}),a.default=void 0;var e=function(){try{return Function("return this")()||(42,eval)("this")}catch(a){return"object"==typeof window&&window.window===window?window:"object"==typeof self&&self.self===self?self:"object"==typeof global&&global.global===global?global:this}}(),f=e.saveAs||"object"!=typeof window||window!==e?function(){}:"download"in HTMLAnchorElement.prototype?function(b,f,g){var h=e.URL||e.webkitURL,i=document.createElement("a");f=f||b.name||"download",i.download=f,i.rel="noopener","string"==typeof b?(i.href=b,i.origin===location.origin?i.click():d(i.href)?c(b,f,g):i.click(i.target="_blank")):(i.href=h.createObjectURL(b),setTimeout(function(){h.revokeObjectURL(i.href)},4E4),setTimeout(i.click.bind(i),0))}:"msSaveOrOpenBlob"in navigator?function(e,f,g){if(f=f||e.name||"download","string"!=typeof e)navigator.msSaveOrOpenBlob(b(e,g),f);else if(d(e))c(e,f,g);else{var h=document.createElement("a");h.href=e,h.target="_blank",setTimeout(h.click.bind(h))}}:function(a,b,d,f){if(f=f||open("","_blank"),f&&(f.document.title=f.document.body.innerText="downloading..."),"string"==typeof a)return c(a,b,d);var g="application/octet-stream"===a.type,h=/constructor/i.test(e.HTMLElement)||e.safari,i=/CriOS\/[\d]+/.test(navigator.userAgent);if((i||g&&h)&&"object"==typeof FileReader){var j=new FileReader;j.onloadend=function(){var a=j.result;a=i?a:a.replace(/^data:[^;]*;/,"data:attachment/file;"),f?f.location.href=a:location=a,f=null},j.readAsDataURL(a)}else{var k=e.URL||e.webkitURL,l=k.createObjectURL(a);f?f.location=l:location.href=l,f=null,setTimeout(function(){k.revokeObjectURL(l)},4E4)}};e.saveAs=f;a.default=f});
+(function(a,b){if("function"==typeof define&&define.amd)define([],b);else if("undefined"!=typeof exports)b();else{b(),a.FileSaver={exports:{}}.exports}})(this,function(){"use strict";function b(a,b){return"undefined"==typeof b?b={autoBom:!1}:"object"!=typeof b&&(console.warn("Depricated: Expected third argument to be a object"),b={autoBom:!b}),b.autoBom&&/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(a.type)?new Blob(["\uFEFF",a],{type:a.type}):a}function c(b,c,d){var e=new XMLHttpRequest;e.open("GET",b),e.responseType="blob",e.onload=function(){a(e.response,c,d)},e.onerror=function(){console.error("could not download file")},e.send()}function d(a){var b=new XMLHttpRequest;return b.open("HEAD",a,!1),b.send(),200<=b.status&&299>=b.status}function e(a){try{a.dispatchEvent(new MouseEvent("click"))}catch(c){var b=document.createEvent("MouseEvents");b.initMouseEvent("click",!0,!0,window,0,0,0,80,20,!1,!1,!1,!1,0,null),a.dispatchEvent(b)}}var f="object"==typeof window&&window.window===window?window:"object"==typeof self&&self.self===self?self:"object"==typeof global&&global.global===global?global:void 0,a=f.saveAs||"object"!=typeof window||window!==f?function(){}:"download"in HTMLAnchorElement.prototype?function(b,g,h){var i=f.URL||f.webkitURL,j=document.createElement("a");g=g||b.name||"download",j.download=g,j.rel="noopener","string"==typeof b?(j.href=b,j.origin===location.origin?e(j):d(j.href)?c(b,g,h):e(j,j.target="_blank")):(j.href=i.createObjectURL(b),setTimeout(function(){i.revokeObjectURL(j.href)},4E4),setTimeout(function(){e(j)},0))}:"msSaveOrOpenBlob"in navigator?function(f,g,h){if(g=g||f.name||"download","string"!=typeof f)navigator.msSaveOrOpenBlob(b(f,h),g);else if(d(f))c(f,g,h);else{var i=document.createElement("a");i.href=f,i.target="_blank",setTimeout(function(){e(i)})}}:function(a,b,d,e){if(e=e||open("","_blank"),e&&(e.document.title=e.document.body.innerText="downloading..."),"string"==typeof a)return c(a,b,d);var g="application/octet-stream"===a.type,h=/constructor/i.test(f.HTMLElement)||f.safari,i=/CriOS\/[\d]+/.test(navigator.userAgent);if((i||g&&h)&&"object"==typeof FileReader){var j=new FileReader;j.onloadend=function(){var a=j.result;a=i?a:a.replace(/^data:[^;]*;/,"data:attachment/file;"),e?e.location.href=a:location=a,e=null},j.readAsDataURL(a)}else{var k=f.URL||f.webkitURL,l=k.createObjectURL(a);e?e.location=l:location.href=l,e=null,setTimeout(function(){k.revokeObjectURL(l)},4E4)}};f.saveAs=a.saveAs=a,"undefined"!=typeof module&&(module.exports=a)});
 
 //# sourceMappingURL=FileSaver.min.js.map

package.json

@@ -1,12 +1,12 @@
 {
   "name": "file-saver",
-  "version": "2.0.0-rc.1",
+  "version": "2.0.0",
   "description": "An HTML5 saveAs() FileSaver implementation",
   "main": "dist/FileSaver.min.js",
-  "module": "src/FileSaver.js",
   "files": [
     "dist/FileSaver.js",
     "dist/FileSaver.min.js",
+    "dist/FileSaver.min.js.map",
     "src/FileSaver.js"
   ],
   "scripts": {

src/FileSaver.js

@@ -9,39 +9,37 @@
 */
 
 
-// The one and only way of getting global scope in all enviorment
+// The one and only way of getting global scope in all environments
 // https://stackoverflow.com/q/3277182/1008999
-var _global = (function () {
+var _global = typeof window === 'object' && window.window === window
-// some use content security policy to disable eval
+  ? window : typeof self === 'object' && self.self === self
-  try {
+  ? self : typeof global === 'object' && global.global === global
-    return Function('return this')() || (42, eval)('this')
+  ? global
-  } catch (e) {
+  : this
-    // every global should have circular reference
+
-    // used for checking if someone writes var window = {}; var self = {}
+function bom (blob, opts) {
-    return typeof window === 'object' && window.window === window ? window
+  if (typeof opts === 'undefined') opts = { autoBom: false }
-    : typeof self === 'object' && self.self === self ? self
+  else if (typeof opts !== 'object') {
-    : typeof global === 'object' && global.global === global ? global : this
+    console.warn('Depricated: Expected third argument to be a object')
+    opts = { autoBom: !opts }
   }
-})()
 
-function bom (blob, autoBom) {
-  if (!autoBom) return blob
   // prepend BOM for UTF-8 XML and text/* types (including HTML)
   // note: your browser will automatically convert UTF-16 U+FEFF to EF BB BF
-  if (/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
+  if (opts.autoBom && /^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(blob.type)) {
     return new Blob([String.fromCharCode(0xFEFF), blob], { type: blob.type })
   }
   return blob
 }
 
-function download (url, name, autoBom) {
+function download (url, name, opts) {
   var xhr = new XMLHttpRequest()
   xhr.open('GET', url)
   xhr.responseType = 'blob'
   xhr.onload = function () {
-    saveAs(xhr.response, name, autoBom)
+    saveAs(xhr.response, name, opts)
   }
-  xhr.onerror = function () {
+  xhr.onerror = function () {
     console.error('could not download file')
   }
   xhr.send()
@@ -55,6 +53,18 @@ function corsEnabled (url) {
   return xhr.status >= 200 && xhr.status <= 299
 }
 
+// `a.click()` doesn't work for all browsers (#465)
+function click(node) {
+  try {
+    node.dispatchEvent(new MouseEvent('click'))
+  } catch (e) {
+    var evt = document.createEvent('MouseEvents')
+    evt.initMouseEvent('click', true, true, window, 0, 0, 0, 80,
+                          20, false, false, false, false, 0, null)
+    node.dispatchEvent(evt)
+  }
+}
+
 var saveAs = _global.saveAs ||
 // probably in some web worker
 (typeof window !== 'object' || window !== _global)
@@ -62,7 +72,7 @@ var saveAs = _global.saveAs ||
 
 // Use download attribute first if possible (#193 Lumia mobile)
 : 'download' in HTMLAnchorElement.prototype
-? function saveAs (blob, name, autoBom) {
+? function saveAs (blob, name, opts) {
   var URL = _global.URL || _global.webkitURL
   var a = document.createElement('a')
   name = name || blob.name || 'download'
@@ -78,40 +88,40 @@ var saveAs = _global.saveAs ||
     a.href = blob
     if (a.origin !== location.origin) {
       corsEnabled(a.href)
-        ? download(blob, name, autoBom)
+        ? download(blob, name, opts)
-        : a.click(a.target = '_blank')
+        : click(a, a.target = '_blank')
     } else {
-      a.click()
+      click(a)
     }
   } else {
     // Support blobs
     a.href = URL.createObjectURL(blob)
     setTimeout(function () { URL.revokeObjectURL(a.href) }, 4E4) // 40s
-    setTimeout(a.click.bind(a), 0)
+    setTimeout(function () { click(a) }, 0)
   }
 }
 
-// Use msSaveOrOpenBlob as a second approch
+// Use msSaveOrOpenBlob as a second approach
 : 'msSaveOrOpenBlob' in navigator
-? function saveAs (blob, name, autoBom) {
+? function saveAs (blob, name, opts) {
   name = name || blob.name || 'download'
 
   if (typeof blob === 'string') {
     if (corsEnabled(blob)) {
-      download(blob, name, autoBom)
+      download(blob, name, opts)
     } else {
       var a = document.createElement('a')
       a.href = blob
       a.target = '_blank'
-      setTimeout(a.click.bind(a))
+      setTimeout(function () { click(a) })
     }
   } else {
-    navigator.msSaveOrOpenBlob(bom(blob, autoBom), name)
+    navigator.msSaveOrOpenBlob(bom(blob, opts), name)
   }
 }
 
 // Fallback to using FileReader and a popup
-: function saveAs (blob, name, autoBom, popup) {
+: function saveAs (blob, name, opts, popup) {
   // Open a popup immediately do go around popup blocker
   // Mostly only avalible on user interaction and the fileReader is async so...
   popup = popup || open('', '_blank')
@@ -120,7 +130,7 @@ var saveAs = _global.saveAs ||
     popup.document.body.innerText = 'downloading...'
   }
 
-  if (typeof blob === 'string') return download(blob, name, autoBom)
+  if (typeof blob === 'string') return download(blob, name, opts)
 
   var force = blob.type === 'application/octet-stream'
   var isSafari = /constructor/i.test(_global.HTMLElement) || _global.safari
@@ -147,6 +157,8 @@ var saveAs = _global.saveAs ||
   }
 }
 
-_global.saveAs = saveAs
+_global.saveAs = saveAs.saveAs = saveAs
 
-export default saveAs
+if (typeof module !== 'undefined') {
+  module.exports = saveAs;
+}