fix bug 69459

ONLYOFFICE · Aug 1, 2024 · 9f8b7f8 · 9f8b7f8
1 parent 887ec09
commit 9f8b7f8
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/products/ASC.Files/Core/HttpHandlers/FileHandler.ashx.cs b/products/ASC.Files/Core/HttpHandlers/FileHandler.ashx.cs
@@ -266,9 +266,12 @@ private async Task DownloadFile<T>(HttpContext context, T id, bool forView)
             }
 
             if (!await fileSecurity.CanDownloadAsync(file))
-            {
-                context.Response.StatusCode = (int)HttpStatusCode.Forbidden;
-                return;
+            {                
+                if (!(fileUtility.CanImageView(file.Title) || fileUtility.CanMediaView(file.Title)))
+                {
+                    context.Response.StatusCode = (int)HttpStatusCode.Forbidden;
+                    return;
+                }
             }
 
             if (!string.IsNullOrEmpty(file.Error))
@@ -970,7 +973,7 @@ private async Task ThumbnailFile(HttpContext context, bool force)
     }
 
     private async Task ThumbnailFile(HttpContext context, int id, bool force)
-    {
+    {                
         IFileDao<int> fileDao = null;
         File<int> file = null;
         try