Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-23620

Add the pdf mimetype in the default list of file types to serve as inline when attached to a wiki page

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Major
    • None
    • 5.2, 16.10.9
    • Configuration
    • None
    • Unknown

    Description

      The content disposition of the attachments of XWiki is controlled by a couple of configurations, that will determine whether the file is sent as an inline content, leaving the browser handle it (open or download, depending on what it knows to do) or as an attachment content, forcing the browser to download it.

      These are configured in https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Attachments#HSecurity.

      The pdf mimetype is not in the default list of whitelisted attachment types, which results in pdf files being always proposed for download, in absence of a custom configuration. There is fundamentally no good reason for this protection by default, the browser should ensure security of the pdf files it opens .

      We should add the pdf mimetype in the default list of whitelisted attachment types.

      Attachments

        Activity

          People

            Unassigned Unassigned
            lucaa Anca Luca
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated: