Should Content-Type: application/javascript also include a 'charset=...'?

erlyaws / yaws

Yaws webserver

https://erlyaws.github.io

BSD 3-Clause "New" or "Revised" License

1.28k stars 267 forks source link

Should Content-Type: application/javascript also include a 'charset=...'? #396

Open etnt opened 4 years ago

etnt commented 4 years ago

We are running some security scanning tools that are complaining about this. So my question is if perhaps a 'charset=' should be appended to this content type? (the obsoleted 'text/javascript' would of course get a charset since it falls within 'text/*')

vinoski commented 4 years ago

I think that's OK, but I'll need to look into the issue more.