Page 1 of 1

Error 'X-Content-Type: nosniff' is given since domoticz in beta mode

Posted: Monday 19 March 2018 11:24
by fennec62
Hi
i use personal frontpage

and since i pass in domoticz beta, frontpage doesn't work

Code: Select all

[Error] Did not load script at 'http://10.0.0.1:8080/json.htm?type=devices&plan=1&jsoncallback=jQuery31108805318969018416_1521367357609&_=1521367358460' because non script MIME types are not allowed when 'X-Content-Type: nosniff' is given.
When i write

http://10.0.0.1:8080/json.htm?type=devi ... 1367358460

directly in browser all is ok

I use frontpage with apache2

Since 5 days github of domoticz change

request_handler.cpp add
//browser support to prevent XSS
reply::add_header(&rep, "X-Content-Type-Options", "nosniff");
reply::add_header(&rep, "X-XSS-Protection", "1; mode=block");

Can you help me


Thanks