[galaxy-commits] commit/galaxy-central: dannon: Set header 'X-Content-Type-Options: nosniff' for dataset display. This will prevent IE8 from trying to render as html datasets served as text/plain.

17 Sep 2012

1 new commit in galaxy-central:


https://bitbucket.org/galaxy/galaxy-central/changeset/9afd6804c8be/
changeset:   9afd6804c8be
user:        dannon
date:        2012-09-17 19:19:32
summary:     Set header 'X-Content-Type-Options: nosniff' for dataset display.  This will prevent IE8 from trying to render as html datasets served as text/plain.
affected #:  1 file

diff -r 81b2a6d001dcf2121bf38244775419596fa669bd -r 9afd6804c8be7f4360f41c1b71e3c77e8f71b756 lib/galaxy/datatypes/data.py

--- a/lib/galaxy/datatypes/data.py
+++ b/lib/galaxy/datatypes/data.py
@@ -288,6 +288,9 @@
         #Relocate all composite datatype display to a common location.
         composite_extensions = trans.app.datatypes_registry.get_composite_extensions( )
         composite_extensions.append('html') # for archiving composite datatypes
+        #Prevent IE8 from sniffing content type since we're explicit about it.  This prevents intentionally text/plain
+        #content from being rendered in the browser
+        trans.response.headers['X-Content-Type-Options'] = 'nosniff'
         if isinstance( data, basestring ):
             return data
         if filename and filename != "index":

Repository URL: https://bitbucket.org/galaxy/galaxy-central/

--

This is a commit notification from bitbucket.org. You are receiving
this because you have the service enabled, addressing the recipient of
this email.

    

[galaxy-commits] commit/galaxy-central: dannon: Set header 'X-Content-Type-Options: nosniff' for dataset display. This will prevent IE8 from trying to render as html datasets served as text/plain.

Bitbucket