Re: [widgets] Content-type sniffing and file extension to MIME mapping

On Wed, Dec 10, 2008 at 2:55 AM, Marcos Caceres
<marcosscaceres@gmail.com> wrote:
> The content element is defined here:
> http://dev.w3.org/2006/waf/widgets/#the-content
>
> Would certainly appreciate more details about the security threat.

Thanks for the pointer.  As timeless points out, this doesn't look
like a security issue in this context because the content can be
included only from within the widget.

In other settings, you have to be careful about sites that let users
upload content.  For example, many sites let users upload images.  If
you take an HTTP response from one of these sites and override its
Content-Type, you might be tricked into running the attacker's HTML in
the honest site's security context.

Adam