Re: content sniffing (and HTTP profiling)

On Tue, 7 Apr 2009, Adam Barth wrote:
> 
> As you might be aware, IE8 and Chrome let servers opt out of content
> sniffing using a HTTP header.

To be precise, they allow servers to opt out of content sniffing in 
certain specific cases. It doesn't affect, for instance, how the 
Content-Type header is treated for images (e.g. an image/png image sent as 
image/gif is still treated as a PNG, even with this header set, if I'm not 
mistaken; and Content-Type headers are entirely ignored in certain 
contexts like <embed> elements with explicit type="" attributes or 
@font-face declarations in CSS).

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Wednesday, 8 April 2009 04:59:36 UTC