AtlasOfLivingAustralia / collectory-plugin

A plugin for metadata registry functionality of the ALA
https://collections.ala.org.au
2 stars 25 forks source link

Content type on JSONP queries is application/json instead of text/javascript #159

Open ansell opened 4 years ago

ansell commented 4 years ago

JSONP queries should respond with the content type text/javascript. https://specimens.ala.org.au/browse/co56 was failing due to this URL returning application/json as the content type because X-Content-Type-Options: nosniff was setup as a security measure:

https://collections.ala.org.au/ws/resolveNames/co56?callback=jQuery111102394776374240295_1571183209027&_=1571183209028

I have disabled X-Content-Type-Options: nosniff in the nginx configuration as a workaround until this issue is fixed.

Refs ticket 42335 in helpdesk

RobinaSanderson commented 4 years ago

Won't do before migration to the new infrastructure.