Regression: PDF-Downloads werden beim Klicken gestartet (sollten in neuem Tab geöffnet werden)

zogstrip · 10. Juni 2026 um 14:10

Wir waren beim display-Typ inkonsistent, je nachdem, ob Sie S3 verwenden oder nicht. Das sollte durch

github.com/discourse/discourse

FIX: Serve inline-safe uploads inline on the local file store (#40739)

main ← fix-inline-safe-uploads-local-store

opened 02:09PM - 10 Jun 26 UTC

ZogStriP

+47 -32

Inline-safe uploads (images, PDFs, audio and video) served from the local file s…tore were sent with `Content-Disposition: attachment`, so clicking a PDF link downloaded the file instead of opening it in the browser. This was inconsistent with the S3 store, which already serves these files inline via `FileStore::S3Store.content_disposition_for`, and it left simple self-hosted (single-container, no S3/CDN) sites unable to open PDFs inline. The cause was in `UploadsController#send_file_local_upload`: it only set the disposition to `attachment` for unsafe types, and to `inline` when `?inline=1` was passed, leaving it unset otherwise. Rails' `send_file` defaults an unset disposition to `attachment`, so inline-safe files fell through to a download. This serves inline-safe files with `Content-Disposition: inline` by default, mirroring the S3 store. The `attachment` disposition and the `sandbox;` Content-Security-Policy header are now scoped to the files that are actually forced to download: unsafe types (HTML, SVG, XML, ...) and explicit downloads (`?dl=1`). The redundant `params[:inline]` branch is removed, since inline-safe files are now served inline by default.

behebt werden.

(cc @david)

Dass ein Klick auf eine Datei automatisch in einem anderen Tab öffnet, ist eher eine #product-Frage.

Thema		Antworten	Aufrufe
Make PDFs open directly (not via download) by default Feature completed , pdf-previews	15	445	18. Februar 2026
Add configuration option to serve local PDF uploads inline Feature completed , pdf-previews	2	759	5. September 2024
Discourse send PDF inline Plugin	11	1605	17. Februar 2026
Instead of downloading PDF, how to force PDF to open/view in browser only? Support	4	3520	5. März 2023
Howto open PDF files in same browser window? Feature	22	7507	27. April 2020

Regression: PDF-Downloads werden beim Klicken gestartet (sollten in neuem Tab geöffnet werden)

Verwandte Themen