feat: replace file content type to avoid load script in svg. (#16454)

Signed-off-by: -LAN- <laipz8200@outlook.com>
2025-08-12 14:18:58 +08:00 · 2025-03-21 17:44:13 +08:00 · 2025-03-21 17:44:13 +08:00 · ac910ed200
commit ac910ed200
parent 7709d9df20
1 changed files with 1 additions and 0 deletions
--- a/api/controllers/files/image_preview.py
+++ b/api/controllers/files/image_preview.py
@ -75,6 +75,7 @@ class FilePreviewApi(Resource):
        if args["as_attachment"]:
            encoded_filename = quote(upload_file.name)
            response.headers["Content-Disposition"] = f"attachment; filename*=UTF-8''{encoded_filename}"
+        response.headers["Content-Type"] = "application/octet-stream"

        return response