Clarify CrossSiteDocumentResourceHandler::ShouldBlockBasedOnHeaders behavior if mime type is omitted |
|
Issue descriptionCrossSiteDocumentResourceHandler::ShouldBlockBasedOnHeaders runs before mime sniffing. So, what should it do if the server omits a mime type? Currently it does not block such responses, but perhaps it ought to treat this case similarly to text/plain. |
|
►
Sign in to add a comment |
|
Comment 1 by creis@chromium.org
, Jan 16 2018