Key questions about this property
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? |
It configures a list of attachment MIME types that will trigger a download instead of inline rendering, enhancing security against potential threats. |
| What area does it affect? |
Attachment handling |
| What does the default mean? |
The default value is "text/html,image/svg,image/svg+xml,application/xml", which is the baseline setting used unless it is changed. |
| When should you review it? |
Review this property when configuring security settings for file attachments or updating MIME type policies. |
Out of the box property record
Raw metadata from the property record.
| Property name |
glide.ui.attachment.download_mime_types |
| Sys ID |
13d5b60337111000705f80f7bcbe5d1d |
| Type |
string |
| Application |
Global |
| Default value |
text/html,image/svg,image/svg+xml,application/xml |
| Description |
A list of comma separated attachment mime types that do not render inline in the browser. This will prevent cross site scripting attacks. For example, text/html will force html files to be downloaded to the client as attachments rather than viewed inline in the browser. |
| Updated |
2024-05-25 04:37:27 |
Sources
Official references and nearby text excerpts where this property appears.
Context preview
Snippet 1
... • (New true Use of secure insert multiple operation within import set API Default value • (Old <blank> • (New false Define restricted downloadable MIME types • Description ◦(Old If glide.ui.attachment.download_mime_types does include dangerous MIME types such as text/html, image/svg ,image/svg +xml,application/xml, then dangerous files could be rendered inline in the browser, which could lead to Cross Site Scripting attacks (XSS. ...
More in glide.ui
Other properties in the same namespace.
All 731 properties in glide.ui →