Chris Lu 186747e7e8 admin: view images and PDFs inline in the file browser (#9751) ...

The viewer embedded images and PDFs through the download URL, which sent
Content-Disposition: attachment, so the browser downloaded them instead of
rendering. Add an inline mode to the download endpoint, limited to images and
PDFs so a hostile upload (HTML, SVG) can't run as same-origin script, set
X-Content-Type-Options: nosniff, and resolve the MIME the same way the viewer
does. The viewer now requests the inline URL.

2026-05-30 23:46:09 -07:00

..

css

…

js

admin: view images and PDFs inline in the file browser (#9751)

2026-05-30 23:46:09 -07:00

webfonts

…

favicon.ico

adjust logo

2026-04-23 10:05:51 -07:00