X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/4acafbc59b3c328f5413a6ac045579f431b3ddc1..92ac862af66a1c60fb4e7bf5c916552ab505ff49:/apps/workbench/app/controllers/collections_controller.rb?ds=sidebyside diff --git a/apps/workbench/app/controllers/collections_controller.rb b/apps/workbench/app/controllers/collections_controller.rb index 63af8285b4..7a002427cf 100644 --- a/apps/workbench/app/controllers/collections_controller.rb +++ b/apps/workbench/app/controllers/collections_controller.rb @@ -339,7 +339,7 @@ class CollectionsController < ApplicationController # Prefer the attachment-only-host when we want an attachment # (and when there is no preview link configured) tmpl = Rails.configuration.keep_web_download_url - else + elsif not Rails.configuration.trust_all_content check_uri = URI.parse(tmpl % fmt) if opts[:query_token] and not check_uri.host.start_with?(munged_id + "--") and @@ -347,9 +347,7 @@ class CollectionsController < ApplicationController # We're about to pass a token in the query string, but # keep-web can't accept that safely at a single-origin URL # template (unless it's -attachment-only-host). - unless (Rails.configuration.trust_all_content and tmpl) - tmpl = Rails.configuration.keep_web_download_url - end + tmpl = Rails.configuration.keep_web_download_url if not tmpl raise ArgumentError, "Download precluded by site configuration" end