[webkit-dev] Adding 'X-Content-Type-Options: nosniff' support for scripts.

Mike West mkwst at chromium.org
Wed Feb 6 01:33:23 PST 2013


Continuing my trend of digging up old threads, I'd like to implement
support for 'X-Content-Type-Options: nosniff' when processing script, as
discussed way back in 2011:
https://lists.webkit.org/pipermail/webkit-dev/2011-November/018557.html.

This should be a pretty small patch[1], but because support might require
work outside WebKit, I'll implement it behind an ENABLE_NOSNIFF flag[2].

Thanks!

[1]: https://bugs.webkit.org/show_bug.cgi?id=71851
[2]: https://bugs.webkit.org/show_bug.cgi?id=109029

-mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-dev/attachments/20130206/94249967/attachment-0001.html>


More information about the webkit-dev mailing list