SyntaxFix

[http] Uses of content-disposition in an HTTP response header

Note that RFC 6266 supersedes the RFCs referenced below. Section 7 outlines some of the related security concerns.

The authority on the content-disposition header is RFC 1806 and RFC 2183. People have also devised content-disposition hacking. It is important to note that the content-disposition header is not part of the HTTP 1.1 standard.

The HTTP 1.1 Standard (RFC 2616) also mentions the possible security side effects of content disposition:

15.5 Content-Disposition Issues

RFC 1806 [35], from which the often implemented Content-Disposition
(see section 19.5.1) header in HTTP is derived, has a number of very
serious security considerations. Content-Disposition is not part of
the HTTP standard, but since it is widely implemented, we are
documenting its use and risks for implementors. See RFC 2183 [49]
(which updates RFC 1806) for details.

Examples related to http

• Access blocked by CORS policy: Response to preflight request doesn't pass access control check • Axios Delete request with body and headers? • Read response headers from API response - Angular 5 + TypeScript • Android 8: Cleartext HTTP traffic not permitted • Angular 4 HttpClient Query Parameters • Load json from local file with http.get() in angular 2 • Angular 2: How to access an HTTP response body? • What is HTTP "Host" header? • Golang read request body • Angular 2 - Checking for server errors from subscribe

Examples related to http-headers

• Set cookies for cross origin requests • Adding a HTTP header to the Angular HttpClient doesn't send the header, why? • Passing headers with axios POST request • What is HTTP "Host" header? • CORS error :Request header field Authorization is not allowed by Access-Control-Allow-Headers in preflight response • Using Axios GET with Authorization Header in React-Native App • Axios get access to response header fields • Custom header to HttpClient request • Send multipart/form-data files with angular using $http • Best HTTP Authorization header type for JWT

Examples related to httpwebresponse

• How to convert WebResponse.GetResponseStream return into a string? • How to get error information when HttpWebRequest.GetResponse() fails • reading HttpwebResponse json response, C# • Uses of content-disposition in an HTTP response header

Examples related to httpresponse

• Return content with IHttpActionResult for non-OK response • Why should I use IHttpActionResult instead of HttpResponseMessage? • download csv file from web api in angular js • Proper way to return JSON using node or Express • Writing MemoryStream to Response Object • Returning http status code from Web Api controller • Difference between Pragma and Cache-Control headers? • How to Use Content-disposition for force a file to download to the hard drive? • Return HTTP status code 201 in flask • How to get HTTP Response Code using Selenium WebDriver

Examples related to content-disposition

• How to Use Content-disposition for force a file to download to the hard drive? • Force to open "Save As..." popup open at text link click for PDF in HTML • Uses of content-disposition in an HTTP response header