Comment 193 for bug 25830

Revision history for this message
In , Jruderman (jruderman) wrote :

Security consideration: Gmail appears to use content-disposition: attachment to prevent HTML attachments from being used in XSS attacks. We should avoid breaking that if we add this feature.