Better enforcing of mime type for uploads

atodorov · atodorov · commit ffb00450be52 · 2023-06-28T00:35:37.000+03:00
diff --git a/etc/nginx.conf b/etc/nginx.conf
@@ -84,7 +84,8 @@ http {
 
         location /uploads/  {
             # prevent browser from possibly interpreting untrusted files
-            add_header Content-Type "text/plain";
+            types        { }
+            default_type text/plain;
 
             alias /Kiwi/uploads/;
         }

Original file line number	Diff line number	Diff line change
`@@ -84,7 +84,8 @@ http {`
`84`	`84`
`85`	`85`	`location /uploads/ {`
`86`	`86`	`# prevent browser from possibly interpreting untrusted files`
`87`		`- add_header Content-Type "text/plain";`
	`87`	`+ types { }`
	`88`	`+ default_type text/plain;`
`88`	`89`
`89`	`90`	`alias /Kiwi/uploads/;`
`90`	`91`	`}`