From 36bddcf5fb0730b20f4ff7cd33a9d31357a4486d Mon Sep 17 00:00:00 2001 From: skodak Date: Mon, 17 Mar 2008 12:36:26 +0000 Subject: [PATCH] MDL-13949 removed adobe reader XSS bug workaround; merged from MOODLE_19_STABLE --- lib/filelib.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/filelib.php b/lib/filelib.php index 92a8e70a44..5e989b8975 100644 --- a/lib/filelib.php +++ b/lib/filelib.php @@ -512,6 +512,7 @@ function send_file($path, $filename, $lifetime=86400 , $filter=0, $pathisstring= $lastmodified = $pathisstring ? time() : filemtime($path); $filesize = $pathisstring ? strlen($path) : filesize($path); +/* - MDL-13949 //Adobe Acrobat Reader XSS prevention if ($mimetype=='application/pdf' or mimeinfo('type', $filename)=='application/pdf') { //please note that it prevents opening of pdfs in browser when http referer disabled @@ -527,6 +528,7 @@ function send_file($path, $filename, $lifetime=86400 , $filter=0, $pathisstring= $lifetime = 1; // >0 needed for byteserving } } +*/ //IE compatibiltiy HACK! if (ini_get('zlib.output_compression')) { -- 2.39.5