Skip to content

media_proxy: CSP, content-disposition

href requested to merge href/pleroma:media-proxy-safety into develop

  • Adds CSP headers to the media proxy endpoint

  • Sends content-disposition: attachment; … for non-image/video/audio content types

The default list can be overwritten with :media_proxy, :safe_content_types in the configuration.

  • Also now appends the filename to the proxy URL (fixes some mobile apps, it was requested a while ago)

Merge request reports