DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2025-01-11 05:47:28 -08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Conditionally add content-type

Browse source 
Signed-off-by: snipe <snipe@snipe.net>
This commit is contained in:
snipe 2024-10-17 00:18:34 +01:00
parent 017884f843
commit c01190fac2
1 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
app/Http/Controllers/Users/UserFilesController.php
View file

@ -132,15 +132,19 @@ class UserFilesController extends Controller
$file = 'private_uploads/users/'.$log->filename;
if ((request('inline') == 'true') && (StorageHelper::allowSafeInline($file) === false)) {
// Display the file as text is not allowed for security reasons
if (request('inline') == 'true') {
$headers = [
'Content-Disposition' => 'inline',
'Content-Type' => 'text/plain',
];
return Storage::download($file, $log->filename, $headers);
// This is NOT allowed as inline - force it to be displayed as text
if (StorageHelper::allowSafeInline($file) === false) {
array_push($headers, ['Content-Type' => 'text/plain']);
}
return Storage::download($file, $log->filename, $headers);
}
return Storage::download($file);