Force Download MIME types (instance security hardening)

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Use the glide.ui.attachment.force_download_all_mime_types property to force the download of all MIME type attachments.

    Note:
    If you set the Force Download MIME Types property to true, it overrides the Downloadable MIME types property, which is a comma-delimited listing of downloadable MIME types. To learn more, see Downloadable MIME types.

    More information

    Attribute Description
    Property name glide.ui.attachment.force_download_all_mime_types
    Configuration type System Properties (/sys_properties_list.do)
    Configure in Instance Security Center No
    Purpose To enforce download of all attachments, instead of executing in the browser.
    Recommended value true
    Functional ImpactThis remediation enforces the download of all attachments. No functionality impact, but it results in altered user experience.
    Security risk (High) To reduce the client-side scripting attacks, file attachments should be force downloaded as opposed to being rendered in the browser context.
    References Available system properties

    To learn more about adding or creating a system property, see Add a system property.