[web-devel] XSS vs charset

Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) kazu at iij.ad.jp
Thu Apr 3 00:26:30 UTC 2014


> Good catch on the Warp responses, there's no reason *not* to include
> charset on those. I've pushed a commit for that[1].
> 
> [1]
> https://github.com/yesodweb/wai/commit/1daa65863367251d965be36e5fb388d54681cb0b

Thanks.

> Unless I hear otherwise, I'll leave mime-types
> as-is for now.

I agree.

--Kazu



More information about the web-devel mailing list