[horde] X-Content-Type-Options: nosniff and Chrome 45

Eric eric at fayolle.info
Thu Sep 17 09:58:52 UTC 2015


Hi,

I enable "X-Content-Type-Options: nosniff" in apache and now I've an error
in chrome 45:
Refused to execute script from
'https://domain.tld/services/cache.php?cache=js%2Fcid%3D830ad1f3732179df'
because its MIME type ('text/js') is not executable, and strict MIME type
checking is enabled.

I've never test it before, I'm just trying to secure server.

Debian 8 + Apache 2.4

Thanks - Eric


More information about the horde mailing list