glide.ui.attachment.download_mime_types

[snowuser111]

Hi

what should be the value for this system property for attachments. Anyone have idea ?

glide.ui.attachment.download_mime_types

Thanks

[Chuck Tomasi]

According to the description...

A list of comma separated attachment mime types that do not render inline in the browser. This will prevent cross site scripting attacks. For example, text/html will force html files to be downloaded to the client as attachments rather than viewed inline in the browser.

Here is a list of MIME types to help.

Complete list of MIME types - HTTP | MDN

[dravvyramlochun]

Hello snowuser11,

glide.ui.attachment.download_mime_types

A list of comma-separated attachment mime types that do not render inline in the browser. This prevents cross site scripting attacks. For example, text/html forces HTML files to be downloaded to the client as attachments rather than viewed inline in the browser. Default:

The value here depends on your preference and which mimes type you want to use.

Thanks,

Dravvy

Please Hit like, Helpful or Correct depending on the impact of the response

[Michael Domke]

Hope this helps others but we had two incidents recently that took down our production instance. The issue involved emails sent to our instance with several large TIF attachments. 

The solution proposed by ServiceNow support involved adding "image/tiff, image/tif" to the "glide.ui.attachment.download_mime_types" system property. Let's hope this is all that's needed to solve this. Not fun having your production instance go down.

Michael