We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents eca4f3b + bee6ea1 commit 2c6b5d8Copy full SHA for 2c6b5d8
gitweb/gitweb.perl
@@ -6127,7 +6127,7 @@ sub git_blob_plain {
6127
# want to be sure not to break that by serving the image as an
6128
# attachment (though Firefox 3 doesn't seem to care).
6129
my $sandbox = $prevent_xss &&
6130
- $type !~ m!^(?:text/plain|image/(?:gif|png|jpeg))$!;
+ $type !~ m!^(?:text/plain|image/(?:gif|png|jpeg))(?:[ ;]|$)!;
6131
6132
print $cgi->header(
6133
-type => $type,
0 commit comments