Re: review of content type rules by IETF/HTTP community

On Aug 21, 2007, at 4:02 PM, Maciej Stachowiak wrote:
> The sniffing behavior in HTML5 is not orthogonal to the rest of the  
> spec. It depends on the loading context. <iframe src="gif-sent-with- 
> text-plain-type.txt"> will have different results than <img  
> src="gif-sent-with-text-plain-type.txt">. This is necessary both  
> for compatibility and to minimize the scope of the content sniffing.

No, it just guarantees that intermediaries (which have no idea of the
context) will always have a different sniffing algorithm than the
browsers.  Brilliant.  Are there any other security holes in MSIE you
want to make standard?

....Roy

Received on Wednesday, 22 August 2007 00:34:22 UTC