[whatwg] Style sheet loading and parsing (over HTTP)
Gervase Markham
gerv at mozilla.org
Fri May 25 02:43:12 PDT 2007
Ian Hickson wrote:
> Note that the HTML5 spec requires browsers not to convert text/plain to a
> more dangerous type (text/plain is either treated as text/plain or
> application/octet-stream according to the spec).
Excellent.
Although I also mention my story as a general counterpoint to the "Well,
obviously the browser should Do The Right Thing if the Content-Type is
wrong" viewpoint. Content sniffing can have security consequences.
Gerv
More information about the whatwg
mailing list