You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2018/05/16 02:16:00 UTC
[jira] [Commented] (KNOX-1310) The X-Content-Type-Options header
should be set as 'nosniff'
[ https://issues.apache.org/jira/browse/KNOX-1310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16476734#comment-16476734 ]
ASF subversion and git services commented on KNOX-1310:
-------------------------------------------------------
Commit 7953de69200ba1e9c2189bdd1b9a387831c79376 in knox's branch refs/heads/master from [~pzampino]
[ https://git-wip-us.apache.org/repos/asf?p=knox.git;h=7953de6 ]
KNOX-1310 - The X-Content-Type-Options header should be set as 'nosniff'
> The X-Content-Type-Options header should be set as 'nosniff'
> ------------------------------------------------------------
>
> Key: KNOX-1310
> URL: https://issues.apache.org/jira/browse/KNOX-1310
> Project: Apache Knox
> Issue Type: Bug
> Components: AdminUI
> Affects Versions: 1.0.0
> Reporter: Phil Zampino
> Assignee: Phil Zampino
> Priority: Major
> Fix For: 1.1.0
>
>
> |For every response containing a message body, the Admin UI should include a single Content-type header that correctly and unambiguously states the MIME type of the content in the response body.
>
> Additionally, the response header "X-Content-Type-Options: nosniff" should be returned in all responses to reduce the likelihood that browsers will interpret content in a way that disregards the explicit Content-type header.|
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)