[whatwg] First or last Content-Type header?

Bil Corry bil at corry.biz
Mon Jun 1 16:25:33 PDT 2009


Den.Molib wrote on 6/1/2009 4:55 PM: 
> follow the last one, as it's the one provided nearer the content.

And by the same logic, the header closest to the content could be the one that was injected by an attacker (via application hole) -- so might choosing the first header be more prudent?


- Bil



More information about the whatwg mailing list