[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 Andre Klapper changed: What|Removed |Added Keywords|bugsmash| -- You are receiving this mail because: You are watching all bug changes. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 Brion Vibber changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution||FIXED --- Comment #7 from Brion Vibber 2011-05-13 15:53:59 UTC --- Done on trunk in r87997. Needs testing to confirm that it does in fact protect on IE8 and IE9 of course. :D -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 --- Comment #6 from Brion Vibber 2011-05-13 15:44:38 UTC --- Adding a bajillion of these everywhere we do a Content-Type header is very uggy... creating a wrapper function to add X-Content-Type-Options whenever we do a Content-Type would still mean changing all those and reminding people to use it in future. Might actually be best to just stick it once in WebStart.php -- it'll always be set! :P -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 Brion Vibber changed: What|Removed |Added Status|NEW |ASSIGNED AssignedTo|wikibugs-l@lists.wikimedia. |br...@wikimedia.org |org | -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 --- Comment #5 from Brion Vibber 2011-05-13 12:53:46 UTC --- This'll also need to be added for RawPage at a minimum; wouldn't hurt to add it to regular OutputPage etc as well. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 Chad H. changed: What|Removed |Added Keywords||bugsmash CC||innocentkil...@gmail.com AssignedTo|innocentkil...@gmail.com|wikibug...@lists.wikimedia. ||org --- Comment #4 from Chad H. 2010-09-21 12:14:39 UTC --- Unassigning from myself. Good candidate for bugsmash in October. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 Brion Vibber changed: What|Removed |Added AssignedTo|wikibugs- |innocentkil...@gmail.com |l...@lists.wikimedia.org | -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 Brion Vibber changed: What|Removed |Added CC||br...@wikimedia.org --- Comment #3 from Brion Vibber 2008-12-18 18:08:17 UTC --- Probably worth putting this on action=raw output, and maybe just on everything for good measure... :) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 ^demon changed: What|Removed |Added Attachment #5592 is|0 |1 obsolete|| --- Comment #2 from ^demon 2008-12-18 17:45:02 UTC --- Created an attachment (id=5593) --> (https://bugzilla.wikimedia.org/attachment.cgi?id=5593) Fixed Wrong line, oops. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 ^demon changed: What|Removed |Added Keywords||need-review, patch -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 15461] Support X-Content-Type-Options: nosniff for IE 8
https://bugzilla.wikimedia.org/show_bug.cgi?id=15461 --- Comment #1 from ^demon 2008-12-18 17:42:42 UTC --- Created an attachment (id=5592) --> (https://bugzilla.wikimedia.org/attachment.cgi?id=5592) Add header to StreamFile Both img_auth and thumb use StreamFile, so I added the header for 'X-Content-Type-Options: nosniff' to wfStreamFile(). Does this cover it, or is there more to this? -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
