CPAN-API/metacpan-web — Issue #389: Add "X-Content-Type-Options: nosniff" header when delivering plaintext files
Author: perlpunk
Created: 2011-11-12 19:18:33+00:00
State: open

When browsing through the files of a CPAN package, HTML files are delivered as plaintext, which is good, but for example MSIE will render it as text/html if it looks like HTML, regardless of the content-type.
Newer versions of MSIE (9 and higher) won't, if there is the header

X-Content-Type-Options: nosniff

See also http://perlpunks.de/deliver_html_as_text_plain.html