diff options
| author | Lukas Reschke <lukas@owncloud.com> | 2015-02-25 11:45:44 +0100 |
|---|---|---|
| committer | Lukas Reschke <lukas@owncloud.com> | 2015-03-26 20:01:05 +0100 |
| commit | 55fd0082aa27a4d3d9dc7194fcef150779c559f7 (patch) | |
| tree | d9b204ae635b21db7391d0c7c390de65ea555949 /apps/files/js/file-upload.js | |
| parent | c8c722bc6de3a58e10ba42a55a178d3ba9308bae (diff) | |
| download | nextcloud-server-55fd0082aa27a4d3d9dc7194fcef150779c559f7.tar.gz nextcloud-server-55fd0082aa27a4d3d9dc7194fcef150779c559f7.zip | |
Serve all files with a Content-Disposition of 'attachment' via WebDAV
As an additional security hardening it's sensible to serve these files with a Content-Disposition of 'attachment'. Currently they are served 'inline' and get a "secure mimetype" assigned in case of potential dangerous files.
To test this change ensure that:
- [ ] Syncing with the Desktop client still works
- [ ] Syncing with the Android client still works
- [ ] Syncing with the iOS client still works
I verified that the 1.8 OS X and iOS client still work with this change.
Diffstat (limited to 'apps/files/js/file-upload.js')
0 files changed, 0 insertions, 0 deletions