[issue2551257] Make sure X-Content-Type-Options: nosniff header is set on @@file URL's.
John Rouillard <[email protected]> Thu, 02 Feb 2023 01:24:41 +0000
| Newsgroups | gmane.comp.bug-tracking.roundup.devel |
|---|---|
| Message-ID | <[email protected]> |
New submission from John Rouillard: Downloads using the @@file path (and arguably regular tracker/issue1 url's) should set the X-Content-Type-Options: nosniff header to prevent browsers from trying to determine the mime type on their own. ---------- components: Web interface messages: 7711 nosy: rouilj severity: minor status: new title: Make sure X-Content-Type-Options: nosniff header is set on @@file URL's. type: security _________________________________________________ Roundup tracker <[email protected]> <https://issues.roundup-tracker.org/issue2551257> _________________________________________________