19865 2012-11-05 18:44:00 +0000 Document proper use of X-Content-Type-Options: nosniff 2019-03-29 22:57:23 +0000 1 1 1 Unclassified WHATWG MIME unspecified All All RESOLVED FIXED http://blogs.msdn.com/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx P2 normal Unsorted 19746 1 gphemsley gphemsley annevk mike sideshowbarker+mimespec oldest_to_newest 77895 0 gphemsley 2012-11-05 18:44:00 +0000 Related to IETF issue #23: http://trac.tools.ietf.org/wg/websec/trac/ticket/23 Microsoft introduced the 'X-Content-Type-Options' header to give servers a way to prevent browser sniffing: http://blogs.msdn.com/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx I think this would be a useful addition to the spec, but it shouldn't apply universally, so we'll need to figure out exactly where it fits in. A test implementation is available here: http://franklin.pacificstorms.org/IE8-Test/authoritativeMIME.php 78428 1 gphemsley 2012-11-16 23:18:23 +0000 IE9 added additional usecases: http://blogs.msdn.com/b/ie/archive/2010/10/26/mime-handling-changes-in-internet-explorer.aspx 86362 2 gphemsley 2013-04-18 17:48:58 +0000 *** Bug 21742 has been marked as a duplicate of this bug. *** 86363 3 gphemsley 2013-04-18 17:50:23 +0000 Discussion about inclusion in Gecko: https://bugzilla.mozilla.org/show_bug.cgi?id=471020 86364 4 gphemsley 2013-04-18 17:53:21 +0000 Discussion on cross-browser functionality: http://lists.whatwg.org/htdig.cgi/whatwg-whatwg.org/2012-November/037983.html 87543 5 gphemsley 2013-05-10 19:19:50 +0000 This is now specced. Feedback welcome: http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2013-May/039561.html 129719 6 gphemsley 2019-03-29 22:57:23 +0000 Per comment 5.