3 ms·
1) adopt a standard for specifying MIME type. 2) realize people are not using the standard correctly, disregard the specified type and auto-detect the type. 3
by avian 10y ago
1) adopt a standard for specifying MIME type.
2) realize people are not using the standard correctly, disregard the specified type and auto-detect the type.
3) realize this creates a security problem, adopt a new standard that adds a stronger MIME type specification.
4) go to 2)
- Arnavion 10y agonosniff is opt-in for websites that want the security benefit. If they do that and still irresponsibly send the wrong content type then I can't sympathize with them.