Property reference

glide.ui.attachment.download_mime_types

Sets which attachment MIME types are downloaded instead of rendered inline in the browser. The default list covers HTML, SVG, and XML types, helping reduce cross-site scripting risk when all-MIME-type downloads are not enforced.

Default
text/html,image/svg,image/svg+xml,application/xml
Type
string
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? It configures a list of attachment MIME types that will trigger a download instead of inline rendering, enhancing security against potential threats.
What area does it affect? Attachment handling
What does the default mean? The default value is "text/html,image/svg,image/svg+xml,application/xml", which is the baseline setting used unless it is changed.
When should you review it? Review this property when configuring security settings for file attachments or updating MIME type policies.

Out of the box property record

Raw metadata from the property record.

Property name glide.ui.attachment.download_mime_types
Sys ID 13d5b60337111000705f80f7bcbe5d1d
Type string
Application Global
Default value text/html,image/svg,image/svg+xml,application/xml
Description A list of comma separated attachment mime types that do not render inline in the browser. This will prevent cross site scripting attacks. For example, text/html will force html files to be downloaded to the client as attachments rather than viewed inline in the browser.
Updated 2024-05-25 04:37:27

Sources

Official references and nearby text excerpts where this property appears.

Context preview Snippet 1
... • (New‎ true Use of secure insert multiple operation within import set API Default value • (Old‎ <blank> • (New‎ false Define restricted downloadable MIME types • Description ◦(Old‎ If glide.ui.attachment.download_mime_types does include dangerous MIME types such as text/html, image/svg ,image/svg +xml,application/xml, then dangerous files could be rendered inline in the browser, which could lead to Cross Site Scripting attacks (XSS‎. ...

More in glide.ui

Other properties in the same namespace.

All 731 properties in glide.ui →