commit/galaxy-central: dannon: Set header 'X-Content-Type-Options: nosniff' for dataset display. This will prevent IE8 from trying to render as html datasets served as text/plain.
1 new commit in galaxy-central: https://bitbucket.org/galaxy/galaxy-central/changeset/9afd6804c8be/ changeset: 9afd6804c8be user: dannon date: 2012-09-17 19:19:32 summary: Set header 'X-Content-Type-Options: nosniff' for dataset display. This will prevent IE8 from trying to render as html datasets served as text/plain. affected #: 1 file diff -r 81b2a6d001dcf2121bf38244775419596fa669bd -r 9afd6804c8be7f4360f41c1b71e3c77e8f71b756 lib/galaxy/datatypes/data.py --- a/lib/galaxy/datatypes/data.py +++ b/lib/galaxy/datatypes/data.py @@ -288,6 +288,9 @@ #Relocate all composite datatype display to a common location. composite_extensions = trans.app.datatypes_registry.get_composite_extensions( ) composite_extensions.append('html') # for archiving composite datatypes + #Prevent IE8 from sniffing content type since we're explicit about it. This prevents intentionally text/plain + #content from being rendered in the browser + trans.response.headers['X-Content-Type-Options'] = 'nosniff' if isinstance( data, basestring ): return data if filename and filename != "index": Repository URL: https://bitbucket.org/galaxy/galaxy-central/ -- This is a commit notification from bitbucket.org. You are receiving this because you have the service enabled, addressing the recipient of this email.
participants (1)
-
Bitbucket