Bug 453425 - Send "X-Content-Type-Options: nosniff" header when displaying…

Bug 453425 - Send "X-Content-Type-Options: nosniff" header when displaying attachments so IE8 doesn't try to sniff the content type. [r=LpSolit a=LpSolit]

Bug 453425 - Send "X-Content-Type-Options: nosniff" header when displaying…
4b555076 · Reed Loden · 8ba061b3 · 4b555076
Commit 4b555076 authored Aug 03, 2010 by Reed Loden
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

attachment.cgi attachment.cgi +2 -1

No files found.
--- a/attachment.cgi
+++ b/attachment.cgi
@@ -338,7 +338,8 @@ sub view {
    }
    print $cgi->header(-type=>"$contenttype; name=\"$filename\"",
                       -content_disposition=> "$disposition; filename=\"$filename\"",
-                       -content_length => $attachment->datasize);
+                       -content_length => $attachment->datasize,
+                       -x_content_type_options => "nosniff");
    disable_utf8();
    print $attachment->data;
 }