When viewing/editing a draw.io drawing, user is not able to export draw.io drawing in vsdx format on Safari #4352

New Issue

OVERLORD · 2026-02-05T08:38:14+03:00

OVERLORD commented

2026-02-05 08:38:14 +03:00

Originally created by @yuelu714 on GitHub (Dec 5, 2023).

Describe the Bug

When viewing/editing a draw.io drawing in a document, user is not able to export draw.io drawing in vsdx format on Safari. The same process works on Chrome.

Steps to Reproduce

Go to a page that contains a draw.io drawing and choose to Edit the page.
Double click on the drawing to go to "Edit" mode in embedded draw.io tool.
In draw.io took, go to "File"->"Export as"->"VSDX(beta)"
In the popup window, enter the file name in "Save As:", then click on "OK" button.
Nothing happens. File is not saved

Expected Behaviour

It is supposed to save/download a copy of the draw.io drawing in vsdx format.

Screenshots or Additional Context

No response

Browser Details

Safaro Version 17.1.2 (19616.2.9.11.12)

Exact BookStack Version

v23.08.3

Originally created by @yuelu714 on GitHub (Dec 5, 2023). ### Describe the Bug When viewing/editing a draw.io drawing in a document, user is not able to export draw.io drawing in vsdx format on Safari. The same process works on Chrome. ### Steps to Reproduce 1. Go to a page that contains a draw.io drawing and choose to Edit the page. 2. Double click on the drawing to go to "Edit" mode in embedded draw.io tool. 3. In draw.io took, go to "File"->"Export as"->"VSDX(beta)" 4. In the popup window, enter the file name in "Save As:", then click on "OK" button. 5. Nothing happens. File is not saved ### Expected Behaviour It is supposed to save/download a copy of the draw.io drawing in vsdx format. ### Screenshots or Additional Context _No response_ ### Browser Details Safaro Version 17.1.2 (19616.2.9.11.12) ### Exact BookStack Version v23.08.3

OVERLORD added the 🐛 Bug label 2026-02-05 08:38:14 +03:00

OVERLORD commented

2026-02-05 08:38:16 +03:00

@ssddanbrown commented on GitHub (Dec 5, 2023):

Hi @yuelu714,
Thanks for reporting but for BookStack I cannot really cover the full scope of draw.io under our support.
If there's anything we can specfically do, then I'm happy to hear about it, otherwise this is likely something on the side of draw.io itself. Your query may be better suited here.

@ssddanbrown commented on GitHub (Dec 5, 2023): Hi @yuelu714, Thanks for reporting but for BookStack I cannot really cover the full scope of draw.io under our support. If there's anything we can specfically do, then I'm happy to hear about it, otherwise this is likely something on the side of draw.io itself. Your query may be better suited [here](https://github.com/jgraph/drawio/issues).

OVERLORD commented

2026-02-05 08:38:22 +03:00

@yuelu714 commented on GitHub (Dec 7, 2023):

We tried it using draw.io site on Safari and can’t replicate it. It worked just fine when exporting.

@yuelu714 commented on GitHub (Dec 7, 2023): We tried it using draw.io site on Safari and can’t replicate it. It worked just fine when exporting.

OVERLORD commented

2026-02-05 08:38:33 +03:00

@yuelu714 commented on GitHub (Jan 23, 2024):

Just want to let you know that v23.12.1 still has the same issue.

@yuelu714 commented on GitHub (Jan 23, 2024): Just want to let you know that v23.12.1 still has the same issue.

OVERLORD commented

2026-02-05 08:38:37 +03:00

@ssddanbrown commented on GitHub (Jan 23, 2024):

Taking a look at this, it looks to be due to CSP since I can replicate in Firefox.

Setting the below option for BookStack (.env option) may work:

ALLOWED_IFRAME_SOURCES="blob: https://*.draw.io https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com"

Not sure though as I've not tested it yet, and have not tested if that can be made specific to draw.io emebed.

@ssddanbrown commented on GitHub (Jan 23, 2024): Taking a look at this, it looks to be due to CSP since I can replicate in Firefox. Setting the below option for BookStack (`.env` option) _may_ work: ```bash ALLOWED_IFRAME_SOURCES="blob: https://*.draw.io https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com" ``` Not sure though as I've not tested it yet, and have not tested if that can be made specific to draw.io emebed.

OVERLORD commented

2026-02-05 08:38:41 +03:00

@yuelu714 commented on GitHub (Jan 23, 2024):

That setting didn't fix it.

@yuelu714 commented on GitHub (Jan 23, 2024): That setting didn't fix it.

OVERLORD commented

2026-02-05 08:38:45 +03:00

@ssddanbrown commented on GitHub (May 4, 2024):

Hi @yuelu714,
I just tested this using the above option in BookStack v24.02.3 and Safari 17.4.1, and using this option allows VSDX export download in Safari (and Firefox) in my instance of testing.

Was the setting change made before the BookStack page editor view was loaded?
Are you using the default draw.io embed or do you have a custom instanced linked using the BookStack DRAWIO env option?

@ssddanbrown commented on GitHub (May 4, 2024): Hi @yuelu714, I just tested this using the above option in BookStack v24.02.3 and Safari 17.4.1, and using this option allows VSDX export download in Safari (and Firefox) in my instance of testing. - Was the setting change made before the BookStack page editor view was loaded? - Are you using the default draw.io embed or do you have a custom instanced linked using the BookStack `DRAWIO` env option?

OVERLORD commented

2026-02-05 08:38:47 +03:00

@vincentbernat commented on GitHub (Jun 30, 2024):

For me, adding blob: did fix the issue.

@vincentbernat commented on GitHub (Jun 30, 2024): For me, adding `blob:` did fix the issue.

OVERLORD referenced this issue

2026-02-05 10:30:02 +03:00

[PR #4352] [MERGED] Updated translations with latest Crowdin changes #6351

Sign in to join this conversation.