htwkmooc/codeocean
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set Content-Type nosniff for all downloads

Browse Source
This commit is contained in:
Sebastian Serth
2023-12-22 00:53:08 +01:00
committed by Sebastian Serth
parent 8fd5829110
commit 79faefde5a
4 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/controllers/live_streams_controller.rb
View File

@ -4,6 +4,7 @@ class LiveStreamsController < ApplicationController
# Including ActionController::Live changes all actions in this controller!
# Therefore, it is extracted into a separate controller
include ActionController::Live
before_action :set_content_type_nosniff
skip_before_action :deny_access_from_render_host, only: :download_submission_file
skip_before_action :verify_authenticity_token, only: :download_submission_file