No more XSS

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

diff --git a/apps/dav/lib/CardDAV/ImageExportPlugin.php b/apps/dav/lib/CardDAV/ImageExportPlugin.php
index fd9223c855bb4f78b02ba768051d13e16cc9a973..5b08319735c45a74594ea75de656f21a8fdb9a95 100644 (file)
--- a/apps/dav/lib/CardDAV/ImageExportPlugin.php
+++ b/apps/dav/lib/CardDAV/ImageExportPlugin.php
@@ -110,7 +110,7 @@ class ImageExportPlugin extends ServerPlugin {
                try {
                        $file = $this->cache->get($addressbook->getResourceId(), $node->getName(), $size, $node);
                        $response->setHeader('Content-Type', $file->getMimeType());
-                       $response->setHeader('Content-Disposition', 'inline');
+                       $response->setHeader('Content-Disposition', 'attachment');
                        $response->setStatus(200);
 
                        $response->setBody($file->getContent());