Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
BedrockMission!

Learn more

View all

Sign in to view all badges

SOLVED

AEM 6.4 SVG as object not showing on edit mode

cn0341
Level 1
Level 1

I am using svg objects in my project but it keep downloading in edit mode.

refer to this 

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/design-importer-issue-with...

 

I did know it blocked by DAM Safe Binary Filter(6.5), so I removed it. but it not working.

 

Then I disable the Content Disposition Filter it fixed, but looks like not a recommened soultion due to security purpose. 

 

So I just wondering what would casue if it's disabled? or is there a alternative way?  

 

 

 

 

 

 

 

 

 

SVG
1 Accepted Solution
vanegi
Correct answer by
Employee
Employee

Hello @cn0341,

This is a known security fix at Sling level, and the disposition filter is added to force this behavior. See [0].

To undo this behavior, you can disable the component [1] or allow the mime type.

 

[0]: SLING-4883 Extend content disposition filter protection to jcr:data

[1]: org.apache.sling.security.impl.ContentDispositionFilter

[2]: http://<host:port>/system/console/components/org.apache.sling.security.impl.ContentDispositionFilter

 

 

OR

 

To allow SVGs to be opened in a browser, you can follow below steps:-

 

- Open org.apache.sling.security.impl.ContentDispositionFilter configuration, and allow below mime type in Included Resource Paths & Content Types.

 

/content/*:image/svg+xml

 

- Uncheck "Enable For All Resource Paths”.

 

Thanks!!

View solution in original post

3 Replies
vanegi
Correct answer by
Employee
Employee

Hello @cn0341,

This is a known security fix at Sling level, and the disposition filter is added to force this behavior. See [0].

To undo this behavior, you can disable the component [1] or allow the mime type.

 

[0]: SLING-4883 Extend content disposition filter protection to jcr:data

[1]: org.apache.sling.security.impl.ContentDispositionFilter

[2]: http://<host:port>/system/console/components/org.apache.sling.security.impl.ContentDispositionFilter

 

 

OR

 

To allow SVGs to be opened in a browser, you can follow below steps:-

 

- Open org.apache.sling.security.impl.ContentDispositionFilter configuration, and allow below mime type in Included Resource Paths & Content Types.

 

/content/*:image/svg+xml

 

- Uncheck "Enable For All Resource Paths”.

 

Thanks!!

View solution in original post

cn0341
Level 1
Level 1
Hi @vanegi, thanks your reply. just want make sure I am doing the right way on Content Disposition Filter
SundeepKatepally
Level 5
Level 5
There is an OSGi Configuration in Felix console named "Apache Sling Content
Disposition Filter" which controls Content Disposition for different mime types based on the path.