Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Content type on JSONP queries is application/json instead of text/javascript #159

Open
ansell opened this issue Oct 15, 2019 · 1 comment
Open

Content type on JSONP queries is application/json instead of text/javascript #159

ansell opened this issue Oct 15, 2019 · 1 comment
Labels
bug IAD security

Comments

@ansell
Copy link
Contributor

ansell commented Oct 15, 2019

JSONP queries should respond with the content type text/javascript. https://specimens.ala.org.au/browse/co56 was failing due to this URL returning application/json as the content type because X-Content-Type-Options: nosniff was setup as a security measure:

https://collections.ala.org.au/ws/resolveNames/co56?callback=jQuery111102394776374240295_1571183209027&_=1571183209028

I have disabled X-Content-Type-Options: nosniff in the nginx configuration as a workaround until this issue is fixed.

Refs ticket 42335 in helpdesk
@RobinaSanderson
Copy link

Won't do before migration to the new infrastructure.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug IAD security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@ansell @peggynewman @RobinaSanderson