search

victims / victims-web

The victims web application.
GNU Affero General Public License v3.0
8 stars 5 forks source link

JSON services from victims-web are currently mis-typed. #83

Closed trevorjay closed 11 years ago

trevorjay commented 11 years ago

Description of problem:

JSON services from victims-web are currently mis-typed.

How reproducible:

Always.

Steps to Reproduce:

  1. curl -k -i https://stage-victims.rhcloud.com/service/status.json

Actual results:

... Content-Type: text/html; charset=utf-8 ...

Expected results:

... Content-Type: application/json; ...

Additional info:

Inspecting the code, mimetype is being set correctly. This is probably a flask configuration issue of some kind.

Still, it's probably worth fixing. This is one of my favorite XSS bugs. :)

abn commented 11 years ago

This should now be fixed.