[whatwg] Video with MIME type application/octet-stream
Boris Zbarsky
bzbarsky at MIT.EDU
Wed Sep 1 07:37:24 PDT 2010
On 9/1/10 10:23 AM, Philip Jägenstedt wrote:
> Huh, I guessed incorrectly, neither serving a PNG as text/plain or
> text/html makes it be sniffed and rendered in a top-level browsing
> context in Opera. However, both work in IE8.
>
> Why do you say that it can't possibly work?
That was a statement about the current implementation state of opera,
not about future possibilities.
> Are there any security risks
> with the browser potentially interpreting a plain text or HTML document
Yes, actually, if there's a filtering proxy trying to screen out video
or image data that's trying to exploit known OS-level bugs, say. But I
had assumed, based on the rest of this discussion, that people simply
didn't care about that.
-Boris
More information about the whatwg
mailing list