17 Jan 2022

Changes on OSS upload and download for Content-Type header [security improvement]

Starting February 7, the OSS upload PUT endpoints will return an HTTP 400 status code if content disposition inline and content types is one of the following:

  • text/xml, application/xml

If your application have already uploaded those files, it will now return an HTTP 400 status code on download.This change should not affect other content disposition formats. This is in addition of the previous announcement made in October 2019 and May 2019 where the following Content-Type where also excluded.

  • text/html, text/javascript, text/x-javascript,
  • application/javascript, application/x-javascript
  • application/xhtml+xml
  • image/svg+xml

Have questions? Please reach our support.

Tags:

Related Article


Posted By

Augusto Goncalves

Developer Advocate at Autodesk since 2008, working with both desktop and web/cloud apps using top technologies, like C#, JavaScript, NodeJS and any other that can solve problems and improve workflows. See my samples on Github and follow me on Twitter for updates.