[whatwg] Video with MIME type application/octet-stream

Boris Zbarsky bzbarsky at MIT.EDU
Wed Sep 1 07:37:24 PDT 2010


On 9/1/10 10:23 AM, Philip Jägenstedt wrote:
> Huh, I guessed incorrectly, neither serving a PNG as text/plain or
> text/html makes it be sniffed and rendered in a top-level browsing
> context in Opera. However, both work in IE8.
>
> Why do you say that it can't possibly work?

That was a statement about the current implementation state of opera, 
not about future possibilities.

> Are there any security risks
> with the browser potentially interpreting a plain text or HTML document

Yes, actually, if there's a filtering proxy trying to screen out video 
or image data that's trying to exploit known OS-level bugs, say.  But I 
had assumed, based on the rest of this discussion, that people simply 
didn't care about that.

-Boris



More information about the whatwg mailing list