Comment #6 on issue 2889 by rajas...@gmail.com: Cannot update diff using IE8
http://code.google.com/p/reviewboard/issues/detail?id=2889

It looks like IE8 attempts to download the file when the mimetype is application/json and that is what the server is sending. There are many posts in StackOverflow around this and the answer seems to be send "text/plain" instead of "application/json" if its IE8 and everything is good.

The other option is to include a "X-Content-Type-Options: nosniff" which instructs not to sniff the mimetype and serve the file as is. (Reference: http://security.stackexchange.com/questions/7506/using-file-extension-and-mime-type-as-output-by-file-i-b-combination-to-dete/7531#7531, Item 4 in the Defenses section in that post). Since IE is the only one to allow X-Content-Type-Options, can we include this in the WebApiResponse. I already see a block in WebApiResponse to convert mimetype to 'text/plain' if its not an ajax and there are uploads, but since this is an AJAX call, it wouldnt pass through this block ?

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
You received this message because you are subscribed to the Google Groups 
"reviewboard-issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard-issues+unsubscr...@googlegroups.com.
To post to this group, send email to reviewboard-issues@googlegroups.com.
Visit this group at http://groups.google.com/group/reviewboard-issues?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to