On 8/28/13 11:50 AM, Michal Zalewski wrote:
1) Both jar: and mhtml: (which work or worked in a very similar way) have caused problems in absence of strict Content-Type matching.
This is an issue for both versions of this proposal. We'd need to do strict matching on the type.
-Boris
