LotusGuild/tinker_tickets
4
0
Fork 0
Code Issues 46 Pull Requests Actions Packages Projects Releases Wiki Activity

download_attachment.php has no HTTP Range/partial-content support #99

New Issue
Closed
opened 2026-09-01 00:13:38 -04:00 by jared · 1 comment
jared commented 2026-09-01 00:13:38 -04:00
Owner
Copy Link
Copy Source

Severity: Low

api/download_attachment.php's streaming loop reads and emits the entire file unconditionally regardless of any Range request header, and no Accept-Ranges header is ever set.

Impact: Large video or PDF attachments can't be scrubbed/seeked in-browser, and an interrupted download can't be resumed — every retry re-transfers the whole file from the start.

Fix: Add Accept-Ranges: bytes and honor Range request headers with a 206 Partial Content response for large files.

**Severity:** Low `api/download_attachment.php`'s streaming loop reads and emits the entire file unconditionally regardless of any `Range` request header, and no `Accept-Ranges` header is ever set. **Impact:** Large video or PDF attachments can't be scrubbed/seeked in-browser, and an interrupted download can't be resumed — every retry re-transfers the whole file from the start. **Fix:** Add `Accept-Ranges: bytes` and honor `Range` request headers with a 206 Partial Content response for large files.
jared added the performancepriority/low labels 2026-09-08 10:15:50 -04:00
jared commented 2026-09-08 21:18:23 -04:00
Author
Owner
Copy Link
Copy Source

Fixed and verified (real MariaDB/jsdom/curl-range as applicable). Merged to main in commit 23d94bf.

Fixed and verified (real MariaDB/jsdom/curl-range as applicable). Merged to main in commit 23d94bf.
jared closed this issue 2026-09-08 21:18:23 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
api
Bearer/internal API surface
 bug
Something is not working
 concurrency
Race condition / concurrency bug
 config
Configuration / deployment default
 data-integrity
Data correctness / schema / integrity issue
 dead-code
Unused / dead code cleanup
 documentation
README / docs accuracy
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 needs-decision
Needs a maintainer decision, not clearly a bug
 notifications
Matrix / in-app notification bug
 performance
Performance or resource-usage concern
 priority/docs
Documentation-only gap
 priority/high
High-severity / high-impact issue
 priority/low
Low-severity / cosmetic issue
 priority/medium
Medium-severity issue
 question
More information is needed
 rate-limiting
Rate limiting behavior
 reliability
Reliability / error-handling gap
 security
Security or access-control impact
 ux
User-facing UX/functional bug
 wontfix
This won't be fixed
 workflow
Ticket status workflow engine
No labels performance priority/low
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
cole (Cole Keller) jared (Jared Vititoe) nathan (Nathan Vititoe)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: LotusGuild/tinker_tickets#99