On 8/28/13 11:50 AM, Michal Zalewski wrote: > 1) Both jar: and mhtml: (which work or worked in a very similar way) > have caused problems in absence of strict Content-Type matching. This is an issue for both versions of this proposal. We'd need to do strict matching on the type. -Boris