v1.0.176: X-Content-Type-Options nosniff for ORB fix
This commit is contained in:
@@ -356,6 +356,7 @@ class Handler(BaseHTTPRequestHandler):
|
|||||||
self.send_response(200)
|
self.send_response(200)
|
||||||
self.send_header("Content-Type", "application/javascript; charset=utf-8")
|
self.send_header("Content-Type", "application/javascript; charset=utf-8")
|
||||||
self.send_header("Content-Length", str(len(js)))
|
self.send_header("Content-Length", str(len(js)))
|
||||||
|
self.send_header("X-Content-Type-Options", "nosniff")
|
||||||
self._send_cors()
|
self._send_cors()
|
||||||
self.end_headers()
|
self.end_headers()
|
||||||
self.wfile.write(js)
|
self.wfile.write(js)
|
||||||
|
|||||||
Reference in New Issue
Block a user