Project

General

Profile

Actions
Copy link

Bug #13042

open

Disallow content type sniffing

Added by Matthias Van Ceulebroeck 2 months ago. Updated 11 days ago.

Status:
Review
Priority:
Normal
Assignee:
Matthias Van Ceulebroeck
Target version:
4.11.2
Start date:
09/13/2024
Due date:
% Done:

0%

Estimated time:

Description

Per ASVS's recommendation 14.1.1 every response ought to contain the X-Content-Type-Option; nosniff

Related issues 1 (1 open — 0 closed)

Related to Improvements #13187: Allow custom headers to be configured in the config fileInProgressRomain Mardulyn11/06/2024

Actions
Actions
Copy link
 #1

Updated by Romain Mardulyn 2 months ago

  • Status changed from New to InProgress
Actions
Copy link
 #2

Updated by Romain Mardulyn 2 months ago

  • Status changed from InProgress to Review
  • Assignee deleted (Romain Mardulyn)
Actions
Copy link
 #3

Updated by Matthias Van Ceulebroeck 11 days ago

  • Related to Improvements #13187: Allow custom headers to be configured in the config file added
Actions
Copy link
 #4

Updated by Matthias Van Ceulebroeck 11 days ago

  • Assignee set to Matthias Van Ceulebroeck
Actions
Copy link

Also available in: Atom PDF