We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 826aede commit 5cf8285Copy full SHA for 5cf8285
python/ql/src/semmle/python/frameworks/Django.qll
@@ -1438,7 +1438,10 @@ private module Django {
1438
// How to support the `headers` argument here?
1439
override DataFlow::Node getMimetypeOrContentTypeArg() { none() }
1440
1441
- override string getMimetypeDefault() { result = "text/html" }
+ override string getMimetypeDefault() {
1442
+ // see https://github.com/django/django/blob/ebb08d19424c314c75908bc6048ff57c2f872269/django/http/response.py#L471-L479
1443
+ result = "application/octet-stream"
1444
+ }
1445
}
1446
1447
/** Gets a reference to an instance of `django.http.response.FileResponse`. */
0 commit comments