Actions
action #44564
closedCorrect MIME content types of delivered files served by Mojolicious, compressed archives served as "text/plain"
Start date:
2018-11-30
Due date:
% Done:
0%
Estimated time:
Description
Observation¶
[29/11/2018 22:40:21] <lurchi_> openqa started to serve *.tar.bz2 and *.tar.xz as Content-Type: text/plain
[29/11/2018 22:40:47] <lurchi_> *.iso and *.ogv have useful type (iso9660, video/ogg)
Also:
$ curl -I https://openqa.suse.de/tests/3376089/file/scc_registration-y2logs.tar.bz2
HTTP/1.1 200 OK
Date: Thu, 19 Sep 2019 12:00:43 GMT
Server: Mojolicious (Perl)
ETag: "e539108128283a490d85f953d3552f89"
Last-Modified: Wed, 18 Sep 2019 18:21:19 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Accept-Ranges: bytes
Content-Length: 296036
Content-Type: text/plain;charset=UTF-8
and I made the same observation some time ago. Can we check this?
Steps to reproduce¶
- Go to any completed job that has *.tar.bz2 or *.tar.xz in "Logs & Assets", e.g. https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=gnome&version=Tumbleweed#downloads
- Check the content type of the archives: This depends on browsers and configured behaviour. Can also be checked with
curl -I <download_url>
Problem¶
Depending on browser configuration "text/plain" might be configured to be opened directly in the browser or be opened with a program to show plain text content. When clicking on compressed archives which are delivered as "text/plain" the browser can still, show binary garbage or crash client programs that try to handle this content
Expected result¶
Only files which really are plain text should be delivered as such
Actions