Erik Michelson d2585fbd3b fix: set content-disposition and csp header on uploads ...

This is required since SVG files are able to contain
malicious code through JavaScript and remote embeddings.
When opened in a browser tab, this code would be
executed. However, with these headers in place, there's
no possibility of getting the files to run in the
browser.

Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>

2025-04-10 00:21:55 +02:00

12 KiB

Raw Blame History

View Raw