Henry S. Thompson wrote: > ... > So, what's interesting about this to me is that > > a) Adam Barth's current mime-sniff draft [1] rules it out (because > text/plain to text/html is classified as privilege escalation, > because text/html is 'scriptable'); But as far as I understand it it *does* sniff text/plain as text/html in some cases (when certain control characters are found in the right place). > ... Best regards, JulianReceived on Sunday, 6 December 2009 13:14:56 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 26 April 2012 12:48:18 GMT