diff --git a/resources/sql/patches/105.mimetype.sql b/resources/sql/patches/105.mimetype.sql new file mode 100644 index 0000000000..99f53a5580 --- /dev/null +++ b/resources/sql/patches/105.mimetype.sql @@ -0,0 +1,4 @@ +/* Prior to D1615, we used the raw output of `file` to determine mime types, + without stripping carriage returns. This creates Content-Type headers + which are blocked by response-splitting protections introduced in D1564. */ +UPDATE phabricator_file.file SET mimeType = TRIM(BOTH "\n" FROM mimeType);