Fix "Download Meshes" functionality

CHANGELOG.unreleased.md

@@ -58,6 +58,8 @@ For upgrade instructions, please check the [migration guide](MIGRATIONS.released
 - Fixed that last dimension value in ND dataset was not loaded. [#7535](https://github.com/scalableminds/webknossos/pull/7535)
 - Fixed the initialization of the mapping list for agglomerate views if json mappings are present. [#7537](https://github.com/scalableminds/webknossos/pull/7537)
 - Fixed a bug where uploading ND volume annotations would lead to errors due to parsing of the chunk paths. [#7547](https://github.com/scalableminds/webknossos/pull/7547)
+- Fixed a bug where listing the annotations of other users would result in empty lists even if there are annotations and you should be allowed to see them. [#7563](https://github.com/scalableminds/webknossos/pull/7563)
+- Fixed the "Download Meshes" functionality which was affected by the recent introduction of the CSP. [#7577](https://github.com/scalableminds/webknossos/pull/7577)
 - Fixed a bug where listing the annotations of other users would result in empty lists even if there are annotations, and you should be allowed to see them. [#7563](https://github.com/scalableminds/webknossos/pull/7563)
 - Fixed errors showing when viewing the annotation list. [#7579](https://github.com/scalableminds/webknossos/pull/7579)
 

frontend/javascripts/libs/zipjs_wrapper.ts

@@ -10,4 +10,13 @@ if (!global.window) {
 
 const Zip = require("@zip.js/zip.js") as typeof ZipType;
 
+Zip.configure({
+  // Avoid that zip.js dynamically creates a web worker using new Blob(...) which would violate the CSP,
+  // see https://gildas-lormeau.github.io/zip.js/api/interfaces/Configuration.html#workerScripts
+  workerScripts: {
+    deflate: ["z-worker.js"],
+    inflate: ["z-worker.js"],
+  },
+});
+
 export default Zip;

frontend/javascripts/oxalis/view/right-border-tabs/skeleton_tab_view.tsx

@@ -218,7 +218,8 @@ export async function importTracingFiles(files: Array<File>, createGroupForEachF
           throw Error("Zip file doesn't contain an NML file.");
         }
 
-        const nmlBlob = await nmlFileEntry.getData(new BlobWriter());
+        // The type definitions for getData are inaccurate. It is defined for entries obtained through calling ZipReader.getEntries, see https://github.com/gildas-lormeau/zip.js/issues/371#issuecomment-1272316813
+        const nmlBlob = await nmlFileEntry.getData!(new BlobWriter());
         const nmlFile = new File([nmlBlob], nmlFileEntry.filename);
 
         const nmlImportActions = await tryParsingFileAsNml(nmlFile);
@@ -228,7 +229,8 @@ export async function importTracingFiles(files: Array<File>, createGroupForEachF
         );
 
         if (dataFileEntry) {
-          const dataBlob = await dataFileEntry.getData(new BlobWriter());
+          // The type definitions for getData are inaccurate. It is defined for entries obtained through calling ZipReader.getEntries, see https://github.com/gildas-lormeau/zip.js/issues/371#issuecomment-1272316813
+          const dataBlob = await dataFileEntry.getData!(new BlobWriter());
           const dataFile = new File([dataBlob], dataFileEntry.filename);
           await Model.ensureSavedState();
           const storeState = Store.getState();

package.json

@@ -154,7 +154,7 @@
     "@types/pixelmatch": "^5.2.4",
     "@types/pngjs": "^6.0.1",
     "@types/three": "^0.142.0",
-    "@zip.js/zip.js": "^2.6.81",
+    "@zip.js/zip.js": "^2.7.32",
     "ansi-to-react": "^6.1.6",
     "antd": "^4.24.15",
     "ball-morphology": "^0.1.0",

webpack.config.js

@@ -28,10 +28,12 @@ module.exports = function (env = {}) {
       chunkFilename: "[name].css",
     }),
     new CopyPlugin({
-      // Use copy plugin to copy *.wasm to output folder.
       patterns: [
+        // Use copy plugin to copy *.wasm to output folder.
         { from: "node_modules/onnxruntime-web/dist/*.wasm", to: "[name][ext]" },
         { from: "public/models/*.*", to: "models/[name][ext]" },
+        // For CSP, see https://gildas-lormeau.github.io/zip.js/api/interfaces/Configuration.html#workerScripts
+        { from: "node_modules/@zip.js/zip.js/dist/z-worker.js", to: "[name][ext]" },
       ],
     }),
   ];

yarn.lock

@@ -2453,10 +2453,10 @@
   resolved "https://registry.yarnpkg.com/@xtuc/long/-/long-4.2.2.tgz#d291c6a4e97989b5c61d9acf396ae4fe133a718d"
   integrity sha512-NuHqBY1PB/D8xU6s/thBgOAiAP7HOYDQ32+BFZILJ8ivkUkAHQnWfn6WhL79Owj1qmUnoN/YPhktdIoucipkAQ==
 
-"@zip.js/zip.js@^2.6.81":
-  version "2.6.81"
-  resolved "https://registry.yarnpkg.com/@zip.js/zip.js/-/zip.js-2.6.81.tgz#c3c9618a8e02f3a24d359a0a14d46985fea971f5"
-  integrity sha512-VXrwa5fthYq74sIZsHarCFVSwnKdispTd/WQBgcNEuB9X0N3L5s8odRCjx9Zw6XsvpG5krqB4ZN4X0lLMyjgDA==
+"@zip.js/zip.js@^2.7.32":
+  version "2.7.32"
+  resolved "https://registry.yarnpkg.com/@zip.js/zip.js/-/zip.js-2.7.32.tgz#54b1d4b2e6dcfc9cd75fd487d5831f8d983e55a6"
+  integrity sha512-9Ox1meDIvIKE23LLA7Fxd/ewJpKjj2KryH92doHRqx2406LmIzorsiMawL0qIK7dvwN9K+mfk47lauoIE0o1zQ==
 
 abab@^2.0.0:
   version "2.0.5"