Re: [w3c/manifest] Why does obtaining not check a MIME type? (#821)

@dominickng, @mgiuca: Did we add any metrics to Chrome? Generally, we'd like to get away from MIME sniffing, both for aesthetic reasons and to create more robust security boundaries (CORB, for example, since AFAIR, Chromium parses the manifest file in the renderer). Before rejecting the suggestion out of hand, it would be helpful to see numbers.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/821#issuecomment-617028117

Received on Tuesday, 21 April 2020 08:16:50 UTC