github/meteor
1
1
Fork 0
mirror of https://github.com/meteor/meteor.git synced 2026-05-02 03:01:46 -04:00
Code Issues Packages Projects Releases Wiki Activity

nim, glasser comments

Browse Source
This commit is contained in:
Emily Stark
2014-05-08 08:45:54 -07:00
parent a8673d01cd
commit c044786e2f
4 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
packages/browser-policy-content/browser-policy-content.js
View File

@@ -132,6 +132,7 @@ var setDefaultPolicy = function () {
"connect-src *; " +
"img-src data: 'self'; " +
"style-src 'self' 'unsafe-inline';");
contentSniffingAllowed = false;
};
var setWebAppInlineScripts = function (value) {

1
packages/browser-policy/browser-policy-test.js
View File

@@ -153,6 +153,7 @@ Tinytest.add("browser-policy - x-frame-options", function (test) {
});
Tinytest.add("browser-policy - X-Content-Type-Options", function (test) {
BrowserPolicy.content._reset();
test.equal(BrowserPolicy.content._xContentTypeOptions(), "nosniff");
BrowserPolicy.content.allowContentTypeSniffing();
test.equal(BrowserPolicy.content._xContentTypeOptions(), undefined);

2
packages/webapp/webapp_server.js
View File

@@ -408,7 +408,7 @@ var runWebAppServer = function () {
res.setHeader('X-SourceMap', info.sourceMapUrl);
if (info.type === "js") {
res.setHeader("Content-Type", "text/javascript; charset=UTF-8");
res.setHeader("Content-Type", "application/javascript; charset=UTF-8");
} else if (info.type === "css") {
res.setHeader("Content-Type", "text/css; charset=UTF-8");
}

2
packages/webapp/webapp_tests.js
View File

@@ -19,5 +19,5 @@ Tinytest.add("webapp - content-type header", function (test) {
"text/css; charset=utf-8");
resp = HTTP.get(url.resolve(Meteor.absoluteUrl(), jsResource));
test.equal(resp.headers["content-type"].toLowerCase(),
"text/javascript; charset=utf-8");
"application/javascript; charset=utf-8");
});