don't try to create download links if external, also because cors