Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

ChromeFoundry

(3,270 posts)
1. I think if the web server does not provide the content type for the object...
Thu Aug 15, 2013, 06:06 PM
Aug 2013

Or, doesn't know what content it is serving... I would not want to trust it, and I certainly would not want my browser to automatically open the content with an external (potentially vulnerable) app. By reading the first 256 bytes of data, I don't think a browser can absolutely verify the content of the MIME payload. If you do choose to enable MIME-Sniffing, be sure to update your anti-virus definitions on a frequent schedule to ensure you are protected.

Recommendations

0 members have recommended this reply (displayed in chronological order):

I think if the web server does not provide the content type for the object... ChromeFoundry Aug 2013 #1
Thanks IrishAyes Aug 2013 #2
Mime Sniffing? Fantastic Anarchist Aug 2013 #3
Latest Discussions»Help & Search»Computer Help and Support»? on getting ready to wor...»Reply #1