TIL: The Download Attribute Won’t “Just Work” for Cross-Origin Resources
I just realized that using the "download" attribute on HTML links works only for same-origin resources by default. Fortunately, the "fix" is pretty simple, as long as you have control over your server’s response headers.
Read It