Expand my Community achievements bar.

Dive into Adobe Summit 2024! Explore curated list of AEM sessions & labs, register, connect with experts, ask questions, engage, and share insights. Don't miss the excitement.
SOLVED

AEM 6.4 SVG as object not showing on edit mode

Avatar

Level 1

I am using svg objects in my project but it keep downloading in edit mode.

refer to this 

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/design-importer-issue-with...

 

I did know it blocked by DAM Safe Binary Filter(6.5), so I removed it. but it not working.

 

Then I disable the Content Disposition Filter it fixed, but looks like not a recommened soultion due to security purpose. 

 

So I just wondering what would casue if it's disabled? or is there a alternative way?  

 

 

 

 

 

 

 

 

 

1 Accepted Solution

Avatar

Correct answer by
Employee

Hello @cn0341,

This is a known security fix at Sling level, and the disposition filter is added to force this behavior. See [0].

To undo this behavior, you can disable the component [1] or allow the mime type.

 

[0]: SLING-4883 Extend content disposition filter protection to jcr:data

[1]: org.apache.sling.security.impl.ContentDispositionFilter

[2]: http://<host:port>/system/console/components/org.apache.sling.security.impl.ContentDispositionFilter

 

 

OR

 

To allow SVGs to be opened in a browser, you can follow below steps:-

 

- Open org.apache.sling.security.impl.ContentDispositionFilter configuration, and allow below mime type in Included Resource Paths & Content Types.

 

/content/*:image/svg+xml

 

- Uncheck "Enable For All Resource Paths”.

 

Thanks!!

View solution in original post

3 Replies

Avatar

Correct answer by
Employee

Hello @cn0341,

This is a known security fix at Sling level, and the disposition filter is added to force this behavior. See [0].

To undo this behavior, you can disable the component [1] or allow the mime type.

 

[0]: SLING-4883 Extend content disposition filter protection to jcr:data

[1]: org.apache.sling.security.impl.ContentDispositionFilter

[2]: http://<host:port>/system/console/components/org.apache.sling.security.impl.ContentDispositionFilter

 

 

OR

 

To allow SVGs to be opened in a browser, you can follow below steps:-

 

- Open org.apache.sling.security.impl.ContentDispositionFilter configuration, and allow below mime type in Included Resource Paths & Content Types.

 

/content/*:image/svg+xml

 

- Uncheck "Enable For All Resource Paths”.

 

Thanks!!

Avatar

Level 1
Hi @vanegi, thanks your reply. just want make sure I am doing the right way on Content Disposition Filter

Avatar

Community Advisor
There is an OSGi Configuration in Felix console named "Apache Sling Content
Disposition Filter" which controls Content Disposition for different mime types based on the path.