October 23, 2019

Changes on OSS upload and download for Content-Type header [security improvement]

Starting November 11, the OSS upload PUT endpoints will return an HTTP 400 status code if content disposition inline and content types is one of the following:

  • application/xhtml+xml
  • image/svg+xml

If your application have already uploaded those files, it will now return an HTTP 400 status code on download.This change should not affect other content disposition formats.

This is in addition of the previous announcement made back in May where the following Content-Type where also excluded.

  • text/html, text/javascript, text/x-javascript,
  • application/javascript, application/x-javascript

Have questions? Please reach our support.

Posted by

Developer Advocate, Autodesk

Cyrille has been with Autodesk since 1993 focusing on providing programming support, consulting, training and evangelism to external developers. He has worked for Autodesk in a number of countries: he started his career in the Switzerland and has – so far – working from Switzerland, the United States and France. He and his family have now settled back in Brittany...

Related Posts