It's not enforced for quirks mode per the HTML Standard. I suspect it would break too much to remove that quirk. Might be worth investigating again, but maybe separately from fixing the nosniff issue?
Ah. The quirk is only for same-origin stylesheets. I see. I guess that's quite a bit less risky than I was thinking. :)
I'll add some cross-origin checks to that test, and see if I can slap nosniff support together. Shouldn't be too hard.
Comment 1 by annevank...@gmail.com
, Nov 23 2017