You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
ArtifactsArea: what it touches
ImprovementsKind: in v2.1.229,
ImprovementsSection of the release
What
The Artifact tool description now warns that the viewer sandbox makes any page-initiated download inert, including <a download> links pointing at data: or blob: URLs and script-driven saves, so a file must never be offered through a plain link. Handing the viewer a file to save is now listed as a runtime capability to look up in the artifact-capabilities skill.
Evidence
blocks any download the page starts itself
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
