[ 
https://issues.apache.org/jira/browse/SLING-3815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14089067#comment-14089067
 ] 

Antonio Sanso commented on SLING-3815:
--------------------------------------

thanks and of course for point 3. I might have well misunderstood but I leave 
the ticket a bit open so also  [~fmeschbe] might review.

> Add support for X-Content-Type-Options: nosniff 
> ------------------------------------------------
>
>                 Key: SLING-3815
>                 URL: https://issues.apache.org/jira/browse/SLING-3815
>             Project: Sling
>          Issue Type: Improvement
>          Components: Engine
>            Reporter: Antonio Sanso
>            Assignee: Antonio Sanso
>            Priority: Minor
>         Attachments: SLING-3815-patch.txt, SLING-3815-patch2.txt
>
>
> It would be nice if Sling will have customizable support for 
> X-Content-Type-Options: nosniff .
> This is really useful to defend against some common attack e.g. XSS, Rosetta 
> Flash etc.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to