In Trac clicking the "Plain Text" link under "Download in other formats"
would display the source of the wiki page in the browser. Now it makes
my browser download a text file.
The latter behavior logically makes more sense as it says download, but
I prefer the old behavior (I could still save it should I wish, but also
can just take a quick look at the code to ensure the pages on my live
and backup instance are the same).
Is it possible to change this?
--
You received this message because you are subscribed to the Google Groups "Trac Users" group.
To view this discussion on the web visit https://groups.google.com/d/msg/trac-users/-/zw_CEOmxqJsJ.
To post to this group, send email to trac-...@googlegroups.com.
To unsubscribe from this group, send email to trac-users+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/trac-users?hl=en.
| Subject: | Re: [The Trac Project] #10870: Download in other formats: Plain Text Link in 1.0 RC Used to view in browser, now downloads file |
|---|---|
| Date: | Thu, 27 Sep 2012 21:44:05 -0000 |
| From: | The Trac Project <nor...@edgewall.com> |
| Reply-To: | nor...@edgewall.com |
| CC: | trac-t...@lynx.edgewall.com |
#10870: Download in other formats: Plain Text Link in 1.0 RC Used to view in
browser, now downloads file
--------------------------+--------------------------------
Reporter: miked@… | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: next-stable-1.0.x
Component: web frontend | Version: 1.0-stable
Severity: normal | Resolution:
Keywords: |
--------------------------+--------------------------------
Release Notes:
API Changes:
--------------------------+--------------------------------
Changes (by cboos):
* milestone: 1.0.1 => next-stable-1.0.x
Comment:
I think we could have some user preference for this, for those who really
want to have the unsafe behavior. There we could easily add a hint to
explain the issue.
e.g.
`[ ]` Open plain text attachments directly in the browser
// This can present a security hazard as some browsers will try to
"guess" the MIME type of the file from its content regardless of what was
specified. If someone crafts an attachment which contains malicious HTML
markup (think XSS), you'll be vulnerable. //
--
Ticket URL: <http://trac.edgewall.org/ticket/10870#comment:10>
The Trac Project <http://trac.edgewall.org/>
The Trac Project