- From: <bugzilla@jessica.w3.org>
- Date: Thu, 31 Oct 2013 19:22:15 +0000
- To: public-webapps-bugzilla@w3.org
https://www.w3.org/Bugs/Public/show_bug.cgi?id=23450 --- Comment #2 from Arun <arun@mozilla.com> --- Currently, you can only really set the Content-Type response header (by way of setting the type attribute on Blob and File objects). But, you can't set the Content-Disposition, and do things like "inline" or "attachment". We did discuss this a while ago: http://lists.w3.org/Archives/Public/public-webapps/2010AprJun/0372.html I propose that we specify that for File objects, we should also send a Content-Disposition *in addition* to a Content-Type, using the filename only (leaving "inline" and "attachment" out of it). The other alternative is to add yet another dictionary member (and Blob attribute) for content-disposition, to be supplied along with the Blob constructor. That seems like overkill. Content-Disposition wasn't even really an HTTP/1.1 thing (it was sort of a corollary), and had security implications that I'm not sure we'd like to dredge up again. -- You are receiving this mail because: You are the QA Contact for the bug.
Received on Thursday, 31 October 2013 19:22:17 UTC