[Openfontlibrary] ccHost compression

[Dave Crossland]

2008/11/3 Brendan Ferguson <drsassafras at gmail.com>:
>
> Getting the
> file onto the server is the first big step in launching an attack.

We can set the webserver to send files for download, so neither the
webserver or webbrowser will interpret them.

So could we accept all files, but make them only for download, and
tell site visitors to report problems to us if there are dodgy files?

http://www.thingy-ma-jig.co.uk/blog/06-08-2007/force-a-pdf-to-download
explains how to do this for *.pdf files in a case insensitive,
cross-browser way.