Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: suitenumerique/docs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: suitenumerique/docs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: media-security
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 2 commits
  • 5 files changed
  • 1 contributor

Commits on Feb 27, 2025

  1. 🔒️(back) set ContentDisposition on media upload 

    On the media upload endpoint, we want to set the content-disposition
header. Its value is based on the uploaded file mime-type and if flagged
as unsafe. If the file is not an image or is unsafe then the
contentDisposition is set to attachment to force its download.
Otherwise, we set it to inline.
    @lunika
    lunika committed Feb 27, 2025
    Copy the full SHA
    3804f75 View commit details

  2. 🔒️(nginx) manage Content-Security-Policy in nginx config 

    The media route is managed by nginx. On this route we want to add the
Content-Security-Header to forbid fetching any resources.
See : https://content-security-policy.com/
    @lunika
    lunika committed Feb 27, 2025
    Copy the full SHA
    8cd8454 View commit details

This comparison is taking too long to generate.

Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.

You can try running this command locally to see the comparison on your machine:
git diff main...media-security