4 ms·
Looks nice, you need to make it so the file is force downloaded. I uploaded an html file and it just viewed it.
by mikelbring 16y ago
Looks nice, you need to make it so the file is force downloaded. I uploaded an html file and it just viewed it.
- sahillavingia 16y agoAh good point about .html files, that's been added to the issue tracker.
- wilhelm 16y agoBeing able to view files directly in my browser is nice. Forcing a download just so that I can open the same file in the same program is just annoying. But be careful! If you serve user-uploaded, untrusted files from the same domain as everything else, that's a great way to make yourself vulnerable to XSS.