fionera
/
datatrash
forked from neri/datatrash
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

correct vary header

This commit is contained in:
neri 2022-11-22 20:46:37 +01:00
parent 44843ab222
commit 2de28ca5db
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/download.rs
View File

@ -165,11 +165,11 @@ fn build_file_response(
.set_content_disposition(content_disposition); .set_content_disposition(content_disposition);
let mut response = file.into_response(req); let mut response = file.into_response(req);
add_headers(req, download, &mut response); append_security_headers(&mut response, req, download);
Ok(response) Ok(response)
} }
fn add_headers(req: &HttpRequest, download: bool, response: &mut HttpResponse) { fn append_security_headers(response: &mut HttpResponse, req: &HttpRequest, download: bool) {
// if the browser is trying to fetch this resource in a secure context pretend the reponse is // if the browser is trying to fetch this resource in a secure context pretend the reponse is
// just binary data so it won't be executed // just binary data so it won't be executed
let sec_fetch_mode = req let sec_fetch_mode = req
@ -186,7 +186,7 @@ fn add_headers(req: &HttpRequest, download: bool, response: &mut HttpResponse) {
// the reponse varies based on these request headers // the reponse varies based on these request headers
response response
.headers_mut() .headers_mut()
.append(VARY, HeaderValue::from_static("accept, sec-fetch-mode")); .append(VARY, HeaderValue::from_static("sec-fetch-mode"));
} }
fn get_disposition_params(filename: &str) -> Vec<DispositionParam> { fn get_disposition_params(filename: &str) -> Vec<DispositionParam> {
@ -229,5 +229,5 @@ fn insert_cache_headers(response: &mut HttpResponse, valid_till: OffsetDateTime)
} }
response response
.headers_mut() .headers_mut()
.insert(VARY, HeaderValue::from_name(ACCEPT)); .append(VARY, HeaderValue::from_name(ACCEPT));
} }