fix: security issue fixed by not assigning download blob url to button, instead create a html element and auto click it for download

This commit is contained in:
theoleuthardt 2025-02-19 14:39:40 +01:00
parent 3bcd052235
commit b4d7bccc57
3 changed files with 31 additions and 23 deletions

View file

@ -69,6 +69,7 @@ export async function libreConvert(app: FastifyInstance) {
"Content-Disposition",
`attachment; filename="converted${outputFileExt}"`,
)
.status(200)
.send(convertedBuffer);
} catch (error) {
console.error("Convert error:", error);