By mcdruid on
Change record status:
Published (View all published change records)
Project:
Introduced in branch:
7.x
Introduced in version:
7.90
Issue links:
Description:
D7 now adds a "X-Content-Type-Options: nosniff" header to cached page responses which may not always have been the case previously depending on webserver configuration.
This could cause disruption in rare cases where a D7 site is outputting content such as JS or CSS via cached pages without setting the appropriate content type. The fix in such cases would be to set the content type properly on the response.
Impacts:
Module developers
