"Krinkle" posted a comment on MediaWiki.r87997.
URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/87997#c32189

Commit summary for MediaWiki.r87997:

* (bug 15461) Make IE8 turn off content sniffing. Everbody else should ignore 
this

Adding X-Content-Type-Options: nosniff header in WebStart.php so that it's 
*always* set, even for alternate entry points and when $wgOut gets disabled or 
overridden.

Note that this of course doesn't apply to uploaded images and such loaded 
directly -- the usual caveats still apply.

Have not tested to confirm that this actually protects against sniffing errors 
-- please test on IE8 and IE9.

Krinkle's comment:

That's fine. The unit tests are ran in a PHP environment, albeit most files 
being html or js. We have a php file already that generates a stylesheet to 
test <code>@import</code>  and <code>mw.loader.load</code> and such.

_______________________________________________
MediaWiki-CodeReview mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview

Reply via email to