Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
By mcdruid on
Change record status:
Published (View all published change records)
Project:
Introduced in branch:
7.x
Introduced in version:
7.90
Issue links:
Description:
D7 now adds a "X-Content-Type-Options: nosniff" header to cached page responses which may not always have been the case previously depending on webserver configuration.
This could cause disruption in rare cases where a D7 site is outputting content such as JS or CSS via cached pages without setting the appropriate content type. The fix in such cases would be to set the content type properly on the response.
Impacts:
Module developers