Hawkin
/
arangodb
mirror of https://gitee.com/bigwinds/arangodb
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

added 'x-content-type-options: nosniff' to avoid MSIE bug

This commit is contained in:
Frank Celler 2017-04-24 18:47:21 +02:00
parent 45690bbbdd
commit f94df236a3
3 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
arangod/GeneralServer/HttpCommTask.cpp
View File

@ -129,6 +129,10 @@ void HttpCommTask::addResponse(HttpResponse* response,
StaticStrings::ExposedCorsHeaders);
}
// use "IfNotSet"
response->setHeaderNCIfNotSet(StaticStrings::XContentTypeOptions,
StaticStrings::NoSniff);
// set "connection" header, keep-alive is the default
response->setConnectionType(_closeRequested
? rest::ConnectionType::C_CLOSE

4
lib/Basics/StaticStrings.cpp
View File

@ -104,11 +104,13 @@ std::string const StaticStrings::HLCHeader("x-arango-hlc");
std::string const StaticStrings::KeepAlive("Keep-Alive");
std::string const StaticStrings::Location("location");
std::string const StaticStrings::MultiPartContentType("multipart/form-data");
std::string const StaticStrings::NoSniff("nosniff");
std::string const StaticStrings::Origin("origin");
std::string const StaticStrings::Queue("x-arango-queue");
std::string const StaticStrings::Server("server");
std::string const StaticStrings::StartThread("x-arango-start-thread");
std::string const StaticStrings::WwwAuthenticate("www-authenticate");
std::string const StaticStrings::WwwAuthenticate("www-authenticate");
std::string const StaticStrings::XContentTypeOptions("x-content-type-options");
// mime types
std::string const StaticStrings::MimeTypeJson(

2
lib/Basics/StaticStrings.h
View File

@ -100,11 +100,13 @@ class StaticStrings {
static std::string const KeepAlive;
static std::string const Location;
static std::string const MultiPartContentType;
static std::string const NoSniff;
static std::string const Origin;
static std::string const Queue;
static std::string const Server;
static std::string const StartThread;
static std::string const WwwAuthenticate;
static std::string const XContentTypeOptions;
// mime types
static std::string const MimeTypeJson;