gitlab-org--gitlab-foss/app/controllers/projects/raw_controller.rb

# Controller for viewing a file's raw
class Projects::RawController < Projects::ApplicationController
  include ExtractsPath

  # Authorize
  before_filter :authorize_read_project!
  before_filter :authorize_code_access!
  before_filter :require_non_empty_project

  def show
    @blob = Gitlab::Git::Blob.find(@repository, @commit.id, @path)

    if @blob
      type = if @blob.mime_type =~ /html|javascript/
               'text/plain; charset=utf-8'
             else
               @blob.mime_type
             end

      headers['X-Content-Type-Options'] = 'nosniff'

      send_data(
        @blob.data,
        type: type,
        disposition: 'inline',
        filename: @blob.name
      )
    else
      not_found!
    end
  end
end