Content-Type doesn't support charset

kenichi / angelo

Sinatra-like DSL for Reel that supports WebSockets and SSE

Other

303 stars 23 forks source link

Content-Type doesn't support charset #45

Open tommay opened 9 years ago

tommay commented 9 years ago

The Content-Type header should always include a charset, at least for html, to prevent exploits. Angelo needs a way to at least specify a charset, and it would be wise to provide a default charset where appropriate for vulnerable Content-Types like text/html.

stugol commented 7 years ago

Although given that the project seems to be dead, there's not much point.

kenichi commented 7 years ago

No, it's not quite dead yet! 😉 More, it has been waiting on changes to upstream projects, mostly reel. If you have time to make a PR, it would be much appreciated. Thanks!