{
  "id": 19264585,
  "title": "Logistics Object Storage: Presigned PDF/CSV Downloads with Wrong Content-Disposition",
  "url": "https://urgent.news/2026/11/10/logistics-object-storage-presigned-pdf-csv-downloads-with-wrong",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-10T01:58:04.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/thalion51/logistics-object-storage-presigned-pdfcsv-downloads-with-wrong-content-disposition-35j5"
  },
  "original_language": "en",
  "account": null,
  "summary": "The article discusses the issue of presigned PDF/CSV downloads with incorrect Content-Disposition in logistics object storage. The key points are that the filename and response metadata should be set before issuing a signed GET link, and the object key should be treated as an internal identifier rather than a customer filename. The article provides a design decision for how object storage should handle presigned downloads, emphasizing the importance of invariants such as privacy, link expiration, media type selection, and disposition settings. The uploader creates an immutable export record containing the object key, media type, customer filename, owner, and expiry policy, which is then verified before issuing the signed link. This approach ensures that the intended disposition is explicit and prevents issues with browsers rendering PDFs inline or CSVs being displayed as text. The article concludes that the failure boundary is deliberately boring, and only a metadata check should determine whether the link is issued or not.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}