Displaying file attachments inline
Configure Wikis to display file attachments inline instead
of as attachments. This is useful when you download and display active
content, such as Adobe® Flash
(.swf) files, in your own HTML pages. Enable inline display by changing
a configuration property in the wikis-config.xml
file.
Then change the attachment URLs to use inline parameter.
Before you begin
To edit configuration files, you must use the IBM® WebSphere® Application Server wsadmin client. For more information, see Starting the wsadmin client.
About this task
By default, the HCL Connections server passes Wikis application file attachments to browsers with the header "Content-Disposition: attachment." This means files display as attachments; when users click the attachment they are prompted to open or download the file. It also prevents embedding files. If you want to embed files in your own HTML page using an <embed> tag, the content disposition must be inline. This affects active content, such as Adobe® Flash (.swf), and HTML pages referenced with <iframe>.
Configure a property
in wikis-config.xml
to change the content disposition
from attachment to inline.
Important: Wikis uses the attachment disposition for security reasons. Specifically, uploaded files could potentially contain malicious code that can exploit the cross-site scripting vulnerabilities of some browsers. If you switch to inline disposition, you should configure an alternate domain download for greater security. See Mitigating a cross site scripting attack.
Procedure
- Start the wsadmin client.
- Start the Wikis Jython script interpreter.
- Change the content disposition to inline using the following
command:
WikisConfigService.updateConfig("security.inlineDownload.enabled", "true")
-
Check in the configuration file.Note: You must check in the file during the same wsadmin session in which you checked it out. For more information, see Applying Wikis property changes.
- Change your attachment URLs to use the inline parameter.