Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

SharePoint 2010 is forcing me to save PDF when opening from doc library

Tags:

I have a document library with a PDF file. Whenever I click on the PDF file, I am prompted to save the file. I do not get the option of opening the file, I am forced to save it. What I want is for the PDF file to open, either in the browser or in a separate Adobe Reader window, depending on the Adobe Reader settings. I'm pretty sure SharePoint is responsible for this behavior, because if I put the PDF on my hard drive, then create a HTML file with a link to the file, it opens in the browser when I click on it.

Please note: I looked at this question and did not help. I don't care if the PDF opens in the browser or in a separate Adobe Reader window, I just want it to open.

like image 817
Tobias Funke Avatar asked Jun 02 '10 17:06

Tobias Funke


2 Answers

There is a better way to handle "Browser File Handle" issue. Take a look at my blog here: http://www.pdfsharepoint.com/sharepoint-2010-and-pdf-integration-series-part-1/

Solution #2 addresses Pdf extension without exposing entire Web Application to "Permissive" browsing. Setting "Browsing File Handle" to "permissive" opens too many vulnerabilities with other file extensions.

Thanks,

Dmitry

like image 165
Dmitry Avatar answered Oct 24 '22 22:10

Dmitry


According to this, it's not a bug, it's a feature:

"Unable to Open PDF Directly from SharePoint 2010

After installing SharePoint 2010 your users may find that they can no longer open PDF files and are instead forced to save them to their local machine.

In Internet Explorer 8 Microsoft added a security feature to prevent script injection vulnerabilities caused by buggy client software. This feature is activated by a new HTTP header called X-Download-Options which can be set to noopen. When that header is passed with a file attachment Internet Explorer 8 will not provide the option to directly open the file, instead you must first save the file locally and then open it.

SharePoint 2010 utilizes this enhanced security feature in IE 8 to block the opening of file types it considers vulnerable to scripting or other attacks, such as PDFs. You can modify SharePoint's behavior by changing the Browser File Handling option in the Web Application General Settings of SharePoint 2010. Your options are permissive and strict, with strict being the default.

If your users demand that they open files directly from the web and you are willing to permit the additional security risk you can easily make this modification to your SharePoint web applications."

They go on to show how to change this configuration.

like image 29
DOK Avatar answered Oct 24 '22 22:10

DOK