[SLING-4604] Multiple Content-Disposition headers added

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Security 1.0.10
• Fix Version/s: Security 1.0.12
• Component/s: Extensions
• Assignee: Antonio Sanso
• Reporter: Rob Ryan
• Created: 09/Apr/15 18:55
• Updated: 08/Nov/16 18:18
• Resolved: 14/Jul/15 12:18

Description

Multiple content-disposition headers can be added under some conditions.

This seems to happen because setContentType is actually called more than once for the same response when multiple sling scripts are involved in rendering, e.g. via org.apache.sling.scripting.core.impl.DefaultSlingScript.service(javax.servlet.ServletRequest, javax.servlet.ServletResponse) line: 448