Skip to content

Commit

Permalink
Extend Content-Disposition "inline" to error responses
Browse files Browse the repository at this point in the history
We don't expect a browser to save error responses to a file but we
extend this protection anyway since "inline" is only a suggestion
that shouldn't have any side effects.
  • Loading branch information
rstoyanchev committed Sep 14, 2020
1 parent dccc781 commit 16d125c
Show file tree
Hide file tree
Showing 2 changed files with 26 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -411,7 +411,7 @@ private void addContentDispositionHeader(ServletServerHttpRequest request, Servl

try {
int status = response.getServletResponse().getStatus();
if (status < 200 || status > 299) {
if (status < 200 || (status > 299 && status < 400)) {
return;
}
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -400,6 +400,25 @@ public void addContentDispositionHeader() throws Exception {
this.servletRequest.removeAttribute(WebUtils.FORWARD_REQUEST_URI_ATTRIBUTE);
}

@Test
public void addContentDispositionHeaderToErrorResponse() throws Exception {
ContentNegotiationManagerFactoryBean factory = new ContentNegotiationManagerFactoryBean();
factory.addMediaType("pdf", new MediaType("application", "pdf"));
factory.afterPropertiesSet();

RequestResponseBodyMethodProcessor processor = new RequestResponseBodyMethodProcessor(
Collections.singletonList(new StringHttpMessageConverter()),
factory.getObject());

this.servletRequest.setRequestURI("/hello.dataless");
this.servletResponse.setStatus(400);

processor.handleReturnValue("body", this.returnTypeString, this.container, this.request);

String header = servletResponse.getHeader("Content-Disposition");
assertThat(header).isEqualTo("inline;filename=f.txt");
}

@Test
public void supportsReturnTypeResponseBodyOnType() throws Exception {
Method method = ResponseBodyController.class.getMethod("handle");
Expand Down Expand Up @@ -724,10 +743,14 @@ private void assertContentDisposition(RequestResponseBodyMethodProcessor process

String header = servletResponse.getHeader("Content-Disposition");
if (expectContentDisposition) {
assertThat(header).as("Expected 'Content-Disposition' header. Use case: '" + comment + "'").isEqualTo("inline;filename=f.txt");
assertThat(header)
.as("Expected 'Content-Disposition' header. Use case: '" + comment + "'")
.isEqualTo("inline;filename=f.txt");
}
else {
assertThat(header).as("Did not expect 'Content-Disposition' header. Use case: '" + comment + "'").isNull();
assertThat(header)
.as("Did not expect 'Content-Disposition' header. Use case: '" + comment + "'")
.isNull();
}

this.servletRequest = new MockHttpServletRequest();
Expand Down

0 comments on commit 16d125c

Please sign in to comment.