In case #462950: Mitigate the security risks that come from IE, Chrome and other browsers trying to sniff the mime type doesn't get backported, we should backport whatever we can.

CommentFileSizeAuthor
#3 2400087-1.patch1.49 KBpwolanin
#1 2400087-1.patch1.49 KBpwolanin

Comments

pwolanin’s picture

pwolanin commented
Status: Postponed » Needs review
StatusFileSize
new 2400087-1.patch1.49 KB

Here's a patch to see what the bot thinks - I get some local fails that I don't understand (maybe the test only works under mod_php ?)

pwolanin’s picture

pwolanin commented
Project: Paranoia » Drupal core
Version: 7.x-1.x-dev » 7.x-dev
Component: Code » base system

let's run against core - it should be backportable anyhow

pwolanin’s picture

pwolanin commented
StatusFileSize
new 2400087-1.patch1.49 KB

reposting patch

Status: Needs review » Needs work

The last submitted patch, 3: 2400087-1.patch, failed testing.

idebr’s picture

idebr commented

@greggles @pwolanin Since #462950: Mitigate the security risks that come from IE, Chrome and other browsers trying to sniff the mime type has been tagged with 'Needs backport to D7' would it make sense to continue on the backport in the original issue to increase visibility and close this issue as a duplicate?

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

I think so.

pwolanin’s picture

pwolanin commented
Status: Needs work » Closed (duplicate)