Jakub Zych 27c98bf22a fix(lagoon/attach): StaticHandler sends the stored Content-Disposition and nosniff (quick-261105-oc8) ...

- attach.StaticHandler and attach.StaticHandlerPublic set X-Content-Type-Options: nosniff on every response
- the stored disposition is read with one Attributes call after the is_public gate and sent on GET and HEAD; a value mime.ParseMediaType rejects is sent as attachment
- blobs without a stored disposition are served as before
- lagoon README, storage and attachments docs pages, surf uploads comment updated

2026-11-05 18:13:27 +01:00

..

authentication.md

docs(32.1-01): document the MCP scope list and call context

2026-10-28 14:36:50 +01:00

caching.md

feat(cooler): Cache.Pull returns and removes a value atomically

2026-10-20 22:58:44 +02:00

configuration.md

feat(diary): channels, components and config/log.yaml

2026-10-21 11:48:25 +02:00

events.md

feat(11.1-04): add the Database section and the core Services pages

2026-09-30 22:59:25 +02:00

frontend-and-ajax.md

docs(quick-261015-w7f): docs since v0.1.14 and the Upgrading to 0.2 notes

2026-10-15 23:24:56 +02:00

jobs.md

feat(14-02): conga.Describe reports a registered job's kind, queue, attempts and timeout

2026-10-03 20:56:49 +02:00

localization.md

feat(quick-261016-0fm): admin language follows the stored preference

2026-10-16 10:58:29 +02:00

logging.md

feat(diary): boot list, help and completion requests quietly (quick-261028-rqc)

2026-10-28 21:47:42 +01:00

mail.md

feat(11.1-04): add the Database section and the core Services pages

2026-09-30 22:59:25 +02:00

markdown.md

feat(breakwater): Markdown renderer and HTML sanitizer with the forum policy (D-17)

2026-10-18 14:52:30 +02:00

mcp.md

docs(32.1-01): document the MCP scope list and call context

2026-10-28 14:36:50 +01:00

oauth-server.md

docs(32.1-01): document the MCP scope list and call context

2026-10-28 14:36:50 +01:00

outbound-http.md

feat(14-04): fetchguard.IsPrivateAddr exposes the dial guard's address classification

2026-10-03 22:49:19 +02:00

parity-testing.md

feat(19.4-03): tide captures a named input of an HTML response

2026-10-19 19:59:24 +02:00

push.md

feat(11.1-04): add the Backend section, the remaining Services pages and the concept map links

2026-09-30 23:18:35 +02:00

rate-limiting.md

feat(19.3-01): share rate limits across instances through cooler's Redis store

2026-10-15 17:35:05 +02:00

realtime.md

feat(11.1-04): add the Backend section, the remaining Services pages and the concept map links

2026-09-30 23:18:35 +02:00

routing.md

feat(19.7-01): streaming routes, MCP mount hook, configurable authorize scopes

2026-10-22 16:11:37 +02:00

search.md

feat(14-01): beachcomber DropIndex and EnsureIndex for reindex tooling

2026-10-03 20:01:36 +02:00

storage.md

fix(lagoon/attach): StaticHandler sends the stored Content-Disposition and nosniff (quick-261105-oc8)

2026-11-05 18:13:27 +01:00