[Webkit-unassigned] [Bug 38364] New: Typo in LayoutTests/http/tests/security/xss-DENIED-mime-type-execute-as-html.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=38364

           Summary: Typo in
                    LayoutTests/http/tests/security/xss-DENIED-mime-type-e
                    xecute-as-html.html
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ddkilzer at webkit.org
                CC: abarth at webkit.org, inferno at chromium.org


I believe there is a typo in
LayoutTests/http/tests/security/xss-DENIED-mime-type-execute-as-html.html where
"application-javascript" is used instead of "application/javascript".

Without a "/" in the MIME type, the content returned can be sniffed per
<http://tools.ietf.org/html/draft-abarth-mime-sniff-04>, and because it starts
out with a <script> tag, is likely to be sniffed as "text/html".

Was the use of "application-javascript" intentional or just a typo?

See Bug 37358 for the original fix and test case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.