zulip/puppet
Alex Vandiver 23894fc9a3 uploads: Set Content-Type and -Disposition from Django for local files.
Similar to the previous commit, Django was responsible for setting the
Content-Disposition based on the filename, whereas the Content-Type
was set by nginx based on the filename.  This difference is not
exploitable, as even if they somehow disagreed with Django's expected
Content-Type, nginx will only ever respond with Content-Types found in
`uploads.types` -- none of which are unsafe for user-supplied content.

However, for consistency, have Django provide both Content-Type and
Content-Disposition headers.
2023-02-07 17:12:02 +00:00
..
zulip uploads: Set Content-Type and -Disposition from Django for local files. 2023-02-07 17:12:02 +00:00
zulip_ops puppet: Match the `x` bits on directories to what puppet actually does. 2023-01-26 15:06:01 -08:00
deps.yaml puppet: Upgrade puppetlabs libraries. 2022-11-08 13:26:32 -08:00