9 May 2019

Changes on OSS upload and download for scriptable plain text files [security improvement]

Starting June 12, the OSS upload PUT endpoints will return an HTTP 400 status code if content disposition inline and content types is one of the following:  

  • text/html, text/javascript, text/x-javascript, 
  • application/javascript, application/x-javascript

If your application have already uploaded those files, it will now return an HTTP 400 status code on download.

This change should not affect other content disposition formats. 

 

Have questions? Please reach our support.

 

Related Article