Skip to content

Conversation

@charsbar
Copy link
Collaborator

@charsbar charsbar commented May 3, 2025

should fix #545

my $dump = YAML::Syck::Dump($data);
my $edump = Encode::encode_utf8($dump);
my $action = $c->req->param('ACTION') || 'pause';
$c->res->headers->content_disposition("attachment; filename=$action.yaml");
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mojo won't allow to set newlines in the header value, but I'd still be careful about directly injecting a request parameter into a response header.

@andk
Copy link
Owner

andk commented May 4, 2025

Thanks, applied and deployed just now

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

YAML download for "View Permissions" results does not suggest filename

3 participants