Skip to content

Browsers ignore tag-terminating byte when sniffing scriptable patterns #154

@GPHemsley

Description

@GPHemsley

The way the rules for identifying an unknown MIME type are supposed to work is that only the patterns listed in the table are allowed to be sniffed, including the tag-terminating byte of either space or closing angle bracket. However, both Firefox and Chrome ignore the tag-terminating byte in apparently all instances listed in the table.

This is either a security risk in the browsers, or we should update mimesniff to remove the requirement.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions