]> source.dussan.org Git - nextcloud-server.git/commit
Serve all files with a Content-Disposition of 'attachment' via WebDAV
authorLukas Reschke <lukas@owncloud.com>
Wed, 25 Feb 2015 10:45:44 +0000 (11:45 +0100)
committerLukas Reschke <lukas@owncloud.com>
Thu, 26 Mar 2015 19:01:05 +0000 (20:01 +0100)
commit55fd0082aa27a4d3d9dc7194fcef150779c559f7
treed9b204ae635b21db7391d0c7c390de65ea555949
parentc8c722bc6de3a58e10ba42a55a178d3ba9308bae
Serve all files with a Content-Disposition of 'attachment' via WebDAV

As an additional security hardening it's sensible to serve these files with a Content-Disposition of 'attachment'. Currently they are served 'inline' and get a "secure mimetype" assigned in case of potential dangerous files.

To test this change ensure that:

- [ ] Syncing with the Desktop client still works
- [ ] Syncing with the Android client still works
- [ ] Syncing with the iOS client still works

I verified that the 1.8 OS X and iOS client still work with this change.
lib/private/connector/sabre/filesplugin.php