This is the mail archive of the overseers@sourceware.org mailing list for the Sourceware project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: sourceware.org Bugzilla seems run scripts in HTML


Le 12. 11. 17 à 19:18, Frank Ch. Eigler a écrit :
> (Could we get bugzilla to serve those with application/octet-stream type?)

I'm not a fan of this solution. You would have to create a blacklist
with potentially evil MIME types. text/html is not the only MIME type
which can execute Javascript code. text/xml could too, and possibly some
other MIME types too.

But if you *really* insist, I could implement such a blacklist. :)


Frédéric


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]