diff --git a/common/lib/capa/capa/inputtypes.py b/common/lib/capa/capa/inputtypes.py
index b18beec8e3..ebebc59d98 100644
--- a/common/lib/capa/capa/inputtypes.py
+++ b/common/lib/capa/capa/inputtypes.py
@@ -587,6 +587,7 @@ class JSInput(InputTypeBase):
         - allow-popups
         - allow-forms
         - allow-pointer-lock
+        - allow-downloads
 
     This in turn means that the iframe cannot directly access the top-level
     window elements.
diff --git a/common/lib/capa/capa/templates/jsinput.html b/common/lib/capa/capa/templates/jsinput.html
index cf47d1bfba..17761d9d70 100644
--- a/common/lib/capa/capa/templates/jsinput.html
+++ b/common/lib/capa/capa/templates/jsinput.html
@@ -28,7 +28,7 @@
 
   <iframe name="iframe_${id}"
       id="iframe_${id}"
-      sandbox="allow-scripts allow-popups allow-same-origin allow-forms allow-pointer-lock"
+      sandbox="allow-scripts allow-popups allow-same-origin allow-forms allow-pointer-lock allow-downloads"
       seamless="seamless"
       frameborder="0"
       src="${html_file}"
diff --git a/common/static/js/capa/fixtures/jsinput.html b/common/static/js/capa/fixtures/jsinput.html
index 1862d490c3..039fe3d8d1 100644
--- a/common/static/js/capa/fixtures/jsinput.html
+++ b/common/static/js/capa/fixtures/jsinput.html
@@ -16,7 +16,8 @@
         allow-popups
         allow-same-origin
         allow-forms
-        allow-pointer-lock"
+        allow-pointer-lock
+        allow-downloads"
       height="500"
       width="500"
       src="https://studio.edx.org/c4x/edX/DemoX/asset/webGLDemo.html">
@@ -50,4 +51,3 @@
   </div>
 </section>
 </div>
-