fix: security - force attachment download

camptocamp · Dec 17, 2021 · b4452ff · b4452ff
1 parent 0e5c7df
commit b4452ff
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/c2cgeoform/templates/widgets/readonly/file_upload.pt b/c2cgeoform/templates/widgets/readonly/file_upload.pt
@@ -1,3 +1,3 @@
 <p id="${oid|field.oid}" class="form-control-static deform-readonly-text">
-  <a href="${url}" tal:omit-tag="not:url" tal:content="cstruct.get('filename') or ''"></a>
+  <a href="${url}" download="${cstruct.get('filename') or ''}" tal:omit-tag="not:url" tal:content="cstruct.get('filename') or ''"></a>
 </p>