How can I force files to download to the desktop?

As of SourceForge 4.2, it is possible to configure the application to force your users to download files, instead of having them open within the browser.

Turning this mode on can prevent some of the more basic attacks on users. Simply add the following line to /usr/local/sourceforge/sourceforge_home/etc/sourceforge_configuration.properties:

sf.safeDownloadMode=all

Once the line is in place, simply restart SourceForge for it to take effect. SourceForge sets this to None by default, which means that the user's browser will present them with the normal open/save pop-up when clicking on files in SourceForge. When setting this to All, that pop-up will be altered so the user's only choice is Save. You can also set this value to html to force the user to save only html documents, while allowing all other content to behave as normal.