On Sunday, October 4, 2015 at 8:50:26 PM UTC-7, Boris Zbarsky wrote: > On 10/1/15 5:36 PM, Incnis Mrsi wrote: > > First is "media type (a.k.a. MIME) sniffing", when browser overrides > > media type/subtype. This is implemented in > > toolkit/components/mediasniffer/nsMediaSniffer.cpp component (and > > possibly others, don't know). > > Note that these are generally very conservative in their application. > There are very few cases in which we will override a server-provided > MIME type for a document load, for example (I think the RSS thing might > well be the only case, in fact). > > > There is a proposal > > https://bugzilla.mozilla.org/show_bug.cgi?id=471020 to make behaviour of > > Firefox compatible with MS Internet Explorer and > > https://mimesniff.spec.whatwg.org/#supplied-mime-type-detection-algorithm , > > using <<X-Content-Type-Options: nosniff>> to switch the sniffing off. > > Right, but that proposal needs to actually define what it means to > switch the sniffing off. I don't believe the IE behavior is documented > anywhere, unfortunately.
Hi, Anne has worked to create W3C tests and work towards standardizing the handling of nosniff in Fetch in https://fetch.spec.whatwg.org/#x-content-type-options-header which might possibly make implementation clearer ? cheers ian _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
