http://localhost/ticket/1517 <p> Clicking any of the links to a resource page in the dataset viewer seems to load the page and immediately start downloading the resource file. </p> <p> For example, being here: <a class="ext-link" href="http://test.ckan.net/dataset/europeana-lod"><span class="icon">​</span>http://test.ckan.net/dataset/europeana-lod</a> and clicking on any of the links to the first resource. </p> en-us http://assets.okfn.org/p/ckan/img/ckan_logo_shortname.png http://localhost/ticket/1517 Trac 0.12.3 zephod Tue, 06 Dec 2011 12:52:37 GMT http://localhost/ticket/1517#comment:1 http://localhost/ticket/1517#comment:1 <ul> <li><strong>status</strong> changed from <em>new</em> to <em>closed</em> </li> <li><strong>resolution</strong> set to <em>fixed</em> </li> </ul> <p> After some research, I've decided to disable the iframe datapreview of unknown filetypes. We need a safer mechanism for verifying that it's a text file or web page; a blacklist of filetypes which won't be iframed (GZIP, ZIP, etc) will never be adequate, and accidently starting a binary file download is a dangerous thing. </p> <p> The fix is simple - commit: 17f33031f5e348e623146601f830b8c67462fe00 </p> <p> But more work will be required to relax this restriction. </p> Ticket