Fix failing tests
This commit is contained in:
parent
3a919a48d6
commit
e707347474
|
|
@ -644,7 +644,7 @@ public class RequestResponseBodyMethodProcessorTests {
|
|||
String header = servletResponse.getHeader("Content-Disposition");
|
||||
if (expectContentDisposition) {
|
||||
assertEquals("Expected 'Content-Disposition' header. Use case: '" + comment + "'",
|
||||
"attachment;filename=f.txt", header);
|
||||
"inline;filename=f.txt", header);
|
||||
}
|
||||
else {
|
||||
assertNull("Did not expect 'Content-Disposition' header. Use case: '" + comment + "'", header);
|
||||
|
|
|
|||
|
|
@ -1655,7 +1655,7 @@ public class ServletAnnotationControllerHandlerMethodTests extends AbstractServl
|
|||
|
||||
assertEquals(200, response.getStatus());
|
||||
assertEquals("text/html", response.getContentType());
|
||||
assertEquals("attachment;filename=f.txt", response.getHeader("Content-Disposition"));
|
||||
assertEquals("inline;filename=f.txt", response.getHeader("Content-Disposition"));
|
||||
assertArrayEquals(content, response.getContentAsByteArray());
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -884,7 +884,7 @@ nor disabling the use of path extensions for content negotiation purposes alone
|
|||
are effective at preventing RFD attacks.
|
||||
|
||||
For comprehensive protection against RFD, prior to rendering the response body
|
||||
Spring MVC adds a `Content-Disposition:attachment;filename=f.txt` header to
|
||||
Spring MVC adds a `Content-Disposition:inline;filename=f.txt` header to
|
||||
suggest a fixed and safe download file filename. This is done only if the URL
|
||||
path contains a file extension that is neither whitelisted nor explicitly
|
||||
registered for content negotiation purposes. However it may potentially have
|
||||
|
|
|
|||
Loading…
Reference in New Issue