Skip to content

Comments

Set ContentType header#8

Open
StevenDevooght wants to merge 1 commit intoleastprivilege:aspnetcore3from
StevenDevooght:nosniff_fix
Open

Set ContentType header#8
StevenDevooght wants to merge 1 commit intoleastprivilege:aspnetcore3from
StevenDevooght:nosniff_fix

Conversation

@StevenDevooght
Copy link

To comply to the x-content-type-options 'nosniff' header the HTML response in the StrictSameSiteExternalAuthenticationMiddleware must have a content-type header.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant