[MAGNOLIA-6348] Crosscheck mime type of the response against extension in request URI Created: 21/Aug/15  Updated: 26/Nov/15  Resolved: 10/Sep/15

Status: Closed
Project: Magnolia
Component/s: core
Affects Version/s: 3.0 Final
Fix Version/s: 5.3.12, 5.4.3

Type: Improvement Priority: Major
Reporter: Jaroslav Simak Assignee: Robert Šiška
Resolution: Fixed Votes: 0
Labels: support
Remaining Estimate: 0d
Time Spent: 1d 1.25h
Original Estimate: Not Specified

Issue Links:
Relates
dependency
depends upon MAGNOLIA-6367 Set correct Content-Type header of re... Closed
depends upon MGNLIMG-171 Set contentType correctly in ImagingS... Closed
depends upon MGNLRES-211 Set contentType in ResourcesServlet Closed
relation
is related to MGNLIMG-115 Images are displayed regardless of it... Closed
is related to MAGNOLIA-3452 Content-type of a rendered page shoul... Closed
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Date of First Response:
Epic Link: contentTypeCheck
Sprint: Kromeriz 11
Story Points: 5

 Description   

Once MAGNOLIA-5292 is fixed, we should also introduce additional check to ensure that it is possible to return content with wrong extension, e.g. serving jpg image with zip extension and similar.



 Comments   
Comment by Robert Šiška [ 08/Sep/15 ]

New property validateContentType, default value false.
In case of true returns 400 if the request extension does not match response content type.
Create DOCu ticket after review.

Comment by Roman Kovařík [ 10/Sep/15 ]

https://scm.magnolia-cms.com/projects/MAGNOLIA/repos/main/pull-requests/14/overview

Generated at Mon Feb 12 04:13:40 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.