stable
Clone or download
Read-only
request #7788: Prevent persistent XSS in attachment of an artifact
When a file is downloaded from Tuleap and have not been generated by the application, web browsers must not try to execute it. Change-Id: Ib439d0066d7d45a4e87f5bae50339e72fa1e60fd
Modified Files
| Name | ||||
|---|---|---|---|---|
| M | plugins/docman/include/view/Docman_View_Download.class.php | +1 | −1 | Go to diff View file |
| M | plugins/tracker/include/Tracker/FormElement/Tracker_FormElement_Field_File.class.php | +1 | −1 | Go to diff View file |
| M | src/www/docman/download.php | +1 | −1 | Go to diff View file |
| M | src/www/tracker/download.php | +1 | −1 | Go to diff View file |