Backport: Disable content sniffing on PlainTextBytes

Gusted · Gusted · commit ca96da91693c · 2022-01-22T19:41:48.000+01:00
- Backport of go-gitea#18359
diff --git a/modules/context/context.go b/modules/context/context.go
@@ -291,6 +291,7 @@ func (ctx *Context) PlainTextBytes(status int, bs []byte) {
 	}
 	ctx.Resp.WriteHeader(status)
 	ctx.Resp.Header().Set("Content-Type", "text/plain;charset=utf-8")
+	ctx.Resp.Header().Set("X-Content-Type-Options", "nosniff")
 	if _, err := ctx.Resp.Write(bs); err != nil {
 		log.Error("Write bytes failed: %v", err)
 	}

Original file line number	Diff line number	Diff line change
`@@ -291,6 +291,7 @@ func (ctx *Context) PlainTextBytes(status int, bs []byte) {`
`291`	`291`	`}`
`292`	`292`	`ctx.Resp.WriteHeader(status)`
`293`	`293`	`ctx.Resp.Header().Set("Content-Type", "text/plain;charset=utf-8")`
	`294`	`+ ctx.Resp.Header().Set("X-Content-Type-Options", "nosniff")`
`294`	`295`	`if _, err := ctx.Resp.Write(bs); err != nil {`
`295`	`296`	`log.Error("Write bytes failed: %v", err)`
`296`	`297`	`}`