@@ -13,12 +13,6 @@

 ;;; Tags limit (default:1000)

 ;tags_limit=1000

-;;; Prevent XSS

-;;; If prevent_xss is set to 1,

-;;; binary file except png, gif, jpeg

-;;; is downloaded, not displayed.

-;prevent_xss=1

-

 [admin]

 ;;; If you forget admin password,

 ;;; set this value to 1 and access /reset-password page.

@@ -11,7 +11,7 @@ use Gitprep::Manager;

 use Scalar::Util 'weaken';

 use Validator::Custom;

-our $VERSION = '0.06';

+our $VERSION = '0.07';

 has 'dbi';

 has 'git';

@@ -14,26 +14,13 @@

   # Content type

   my $type = $git->blob_content_type($user, $project, $rev, $file);

-  # Convert text/* content type to text/plain

-  if (app->config->{basic}{prevent_xss} &&

-    ($type =~ m#^text/[a-z]+\b(.*)$# ||

-    ($type =~ m#^[a-z]+/[a-z]\+xml\b(.*)$#)))

-  {

-    my $rest = $1;

-    $rest = defined $rest ? $rest : '';

-    $type = "text/plain$rest";

-  }

-

   # File name

   my $file_name = $rev;

   if (defined $file) { $file_name = $file }

   elsif ($type =~ m/^text\//) { $file_name .= '.txt' }

   # Content disposition

-  my $sandbox = app->config->{basic}{prevent_xss} &&

-    $type !~ m#^(?:text/[a-z]+|image/(?:gif|png|jpeg))(?:[ ;]|$)#;

-  my $content_disposition = $sandbox ? 'attachment' : 'inline';

-  $content_disposition .= "; filename=$file_name";

+  my $content_disposition = "inline; filename=$file_name";

   # Response

   $self->res->headers->content_disposition($content_disposition);