Re: Content sniffing: seeking reliable protection of a text HTTP resource

2015-10-09 Thread ian . melven
On Sunday, October 4, 2015 at 8:50:26 PM UTC-7, Boris Zbarsky wrote: > On 10/1/15 5:36 PM, Incnis Mrsi wrote: > > First is "media type (a.k.a. MIME) sniffing", when browser overrides > > media type/subtype. This is implemented in > > toolkit/components/mediasniffer/nsMediaSniffer.cpp component

Re: Content sniffing: seeking reliable protection of a text HTTP resource

2015-10-04 Thread Boris Zbarsky
On 10/1/15 5:36 PM, Incnis Mrsi wrote: First is “media type (a.k.a. MIME) sniffing”, when browser overrides media type/subtype. This is implemented in toolkit/components/mediasniffer/nsMediaSniffer.cpp component (and possibly others, don’t know). Note that these are generally very conservative

Content sniffing: seeking reliable protection of a text HTTP resource

2015-10-01 Thread Incnis Mrsi
Hello. This message asks for opinions and suggestions how to make Mozilla products understand «Content-Type» of a Web resource exactly as specified in HTTP(s) headers. Content sniffing in browsers is a compromise between standards and interoperability with “poor” Web sites. It creates