Hacks > mod_forcedl

This is a simple Apache 2 module that implements a filter to add a header to the response:

Content-Disposition: attachment
As the example below hints, this was written to combat the PDF XSS vulnerability

To use it download it, untar it, and build it. Then, add something like the following to your Apache configuration:

LoadModule forcedl_module /usr/lib/apache2/modules/mod_forcedl.so
AddOutputFilterByType FORCEDL application/pdf

Download

mod_forcedl v0.0.1
GPG Signature (signed with key 8B9699E1)
Checksums: