Commit Graph

9 Commits

Author SHA1 Message Date
Pale Moon 2afde91fb1 Don't propagate LOAD_FROM_CACHE to the whole load group on charset reload.
This improves our cache consistency when the charset declaration is not within the first 1024 bytes of the document, properly re-fetching resources from the net where we should.
2018-07-25 09:34:02 +08:00
Pale Moon 4e6e186773 Revert "If we have XCTO: nosniff, we should have a content-type as well."
This reverts commit 8167b87bc3f0cb68e53dea50a2bd990d6115cab0.
2018-07-25 09:33:33 +08:00
JustOff e13c58f050 Skip XCTO: nosniff check in case of 30x response 2018-07-25 09:33:19 +08:00
Pale Moon 4a170914a9 If we have XCTO: nosniff, we should have a content-type as well.
If content-type is not sent by the server, then there's nothing to check against, and we should allow the load.
"nosniff" headers are normally sent as a blanket security measure on a domain, but not every server response will include an explicit MIME type.

Follow-up for #1343.
2018-07-25 09:33:12 +08:00
JustOff ede067a2f3 Implement X-Content-Type-Options: nosniff. 2018-07-25 09:31:38 +08:00
janekptacijarabaci 68c5139b0d A channel suspend()-ed in http-on-modify-request shouldn't send out any traffic until resume()-d 2018-07-25 07:02:45 +08:00
Pale Moon 141293f5f3 Hold a reference to OnStartRequest() 2018-07-25 06:56:29 +08:00
wolfbeast 5ee6187aad Prep tree for forward-porting Goanna, stage 1 2018-07-24 23:10:50 +08:00
Moonchild baf46a6bf1 Merge pull request #1 from mozilla/esr38: Esr38 upstream pull 2018-07-24 23:04:07 +08:00