New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Investigate when to send certain files as an attachment #42

Open

J-avery32 opened this issue Jul 21, 2020 · 0 comments

Assignees

Collaborator

J-avery32 commented Jul 21, 2020

Flask says that certain files might need extra security:

By default it will try to guess the mimetype for you, but you can also explicitly provide one. For extra security you probably want to send certain files as attachment (HTML for instance). The mimetype guessing requires a filename or an attachment_filename to be provided.

https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_file

I am unaware of when this applies but we should investigate it further.

J-avery32 self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment