I do not have the Flash app that creates the PDF in the request body, but I verified it against the output of a static resource with the same response headers. Content-Disposition is the crucial one. This was tested in Konqueror with the Okular KPart and works, I fully expect other browsers/plug-in combinations to also work.

#!/usr/bin/perl -T
# ↑↑↑↑↑
# on Windows you can just write …
#!perl -T
# … instead, using the Unix shebang however does no harm
use strict;
use warnings FATAL =>  all ;
use CGI qw();
use IO::File qw();

# delete @ENV{qw(BASH_ENV CDPATH ENV IFS PATH)};
# ↑↑↑↑↑
# Cleaning path is required for taint-checked programs
# that want to run other programs. It does not affect anything here,
# so I commented it out.

my $c = CGI->new;

# untaint data coming from outside
my ($name) = defined $c->url_param( name ) ?
    $c->url_param( name ) =~ /A ([a-zA-Z_-]{1,40}.pdf) z/msx : ();
my ($method) = defined $c->url_param( method ) ?
    $c->url_param( method ) =~ /A (attachment|inline) z/msx : ();
die  invalid parameters  unless $name or $method;

# FIXME: untaint blindly because I don t know how to validate PDF
my ($pdf) = $c->param( POSTDATA ) =~ /(.*)/msx;

STDOUT->binmode( :raw );
STDOUT->print($c->header(
    -Content_Type        =>  application/pdf ,
    -Content_Length      => length($pdf),
    -Content_Disposition => qq($method; filename="$name"),
));
STDOUT->print($pdf);

了解你是mixing GET and POST参数。 • 学习如何撰写安全科学、技术和创新方案。

您需要在以下的吉大港山区负责人中加入

print "Content-Transfer-Encoding: binary
";

The following is working for me to read a pdf file and display it:

use strict;
use warnings;

my $file = "discover.pdf"; # a pdf I happen to have
my $pdf;

open (my $fh, $file);
binmode $fh; # set the file handle to binary mode
while (<$fh>){ $pdf .= $_; } # read it all into a string;
close ($fh);

showPdf($pdf); # call the display function

sub showPdf {

        my $pdf = shift;
        my $file = shift || "new.pdf"; # if no name is given use this
        my $method = shift || "Content-disposition:inline; filename= $file "; # default method
        my $size = length($pdf);

        print "Content-Type: application/pdf
";
        print "Content-Length: $size
";
        print "$method
";
        print "Content-Transfer-Encoding: binary

"; # blank line to separate headers

        print $pdf;

}

原来的法典中也可增加同样的职能,并应当这样做:

#!C:Perlinperl.exe
##
BEGIN { $ENV{PATH} =   ; delete @ENV{  IFS ,  CDPATH ,  ENV ,  BASH_ENV }; }
use strict;
use warnings;
no warnings qw (redefine closure);
use CGI;
my $CGI = new CGI();

#name=generated.pdf&method=inline these are passed via the URL and are in the environmental variable QUERY_STRING
my %nv_pairs = map{my @tmp = split(/=/,$_);$tmp[0] => $tmp[1] }split(/&/,$ENV{QUERY_STRING});
my $name = $nv_pairs{name};
my $method = $nv_pairs{method};

#Raw Data is stored in the POST Parameter POSTDATA
my $pdf = $CGI->param( POSTDATA );

showPdf($pdf, $name, $method);

sub showPdf {

    my $pdf = shift;
    my $file = shift || "new.pdf"; # if no name is given use this
    my $method = shift || "Content-disposition:inline; filename= $file "; # default method
    my $size = length($pdf);

    print "Content-Type: application/pdf
";
    print "Content-Length: $size
";
    print "$method
";
    print "Content-Transfer-Encoding: binary

"; # blank line to separate headers

    print $pdf;

}