Test for sniffing in @font-face

web-platform-tests / wpt

Test suites for Web platform specs — including WHATWG, W3C, and others

https://web-platform-tests.org/

Other

4.91k stars 3.06k forks source link

Test for sniffing in @font-face #4085

Open Ms2ger opened 7 years ago

Ms2ger commented 7 years ago

In particular, sniffing with

no Content-Type
XML Content-Type (of various kinds)
non-XML Content-Type

each of those

without XCTO: nosniff
with XCTO: nosniff
with variants of XCTO: nosniff (various whitespace, case differences, comma-separated value)

gsnedders commented 7 years ago

Not entirely sure if it's worth labelling this with Fetch, but it does touch on support for X-Content-Type-Options. Feel free to unlabel if it feel gratuitous.