jamesfredley commented on PR #15801: URL: https://github.com/apache/grails-core/pull/15801#issuecomment-4930533307
## Status update Merged current `8.0.x` and resolved the upgrade-guide section-number conflict (kept Boot MVC subsections under `@EnableWebMvc` as 32.3-32.5; framework-bean override notes as section 33; render hardening remains section 31). ### Open discussion for weekly meeting Maintainer feedback on the **default content-type** change for inspect-style `render(object)` / unrecognized map rendering is still open: - jdaugherty: prefer not defaulting unknown content to `text/plain` when encoders may produce non-text values; asked to discuss in weekly. - Filename / `Content-Disposition: attachment` hardening is the less controversial part of this PR. Options for the weekly: 1. Keep both protections in this PR (current branch). 2. Split: land filename/disposition now; park content-type default for a follow-up after discussion. 3. Drop content-type default and only ship disposition/filename. Leaving the branch intact so both protections can be reviewed together until that discussion. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
