Merge pull request #236 from camptocamp/force_attachment_download

fix: security - force attachment download
camptocamp · Dec 17, 2021 · 42d2bb9 · 42d2bb9
2 parents 0e5c7df + b4452ff
commit 42d2bb9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/c2cgeoform/templates/widgets/readonly/file_upload.pt b/c2cgeoform/templates/widgets/readonly/file_upload.pt
@@ -1,3 +1,3 @@
 <p id="${oid|field.oid}" class="form-control-static deform-readonly-text">
-  <a href="${url}" tal:omit-tag="not:url" tal:content="cstruct.get('filename') or ''"></a>
+  <a href="${url}" download="${cstruct.get('filename') or ''}" tal:omit-tag="not:url" tal:content="cstruct.get('filename') or ''"></a>
 </p>