1 Commits

Author	SHA1	Message	Date
matthieu	f7f7a07162	feat(mail) : MailAttachmentDownloadController - GET /api/mail/attachments/{id} (stream, disposition: attachment) ... - downloadId = base64url(messageDbId:partNumber) - Content-Disposition: attachment systematique (jamais inline pour eviter XSS via HTML attachments) - X-Content-Type-Options: nosniff - filename sanitise via basename pour eviter path traversal Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 00:12:38 +02:00