Commits on Jan 23, 2018

1. Breaking: Limit X-Content-Type-Options usage …

   Change `x-content-type-options` rule so that it limits the usage
   of the `X-Content-Type-Options` header to scripts and stylesheets
   as modern browsers actually only respect the header for those
   types of resources¹.
   
   Also, sending the header for resources such as images, creates
   problems² in some older browsers.
   
   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   
   ¹ https://fetch.spec.whatwg.org/#x-content-type-options-header
   ² whatwg/fetch#395
   
   Fix #767

   

   alrra committed Jan 23, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 6ae8df8
   • Browse repository at this point

   Copy the full SHA

   6ae8df8 View commit details

   Browse the repository at this point in the history