Welcome Guest Search | Active Topics | Sign In | Register

eo_web.ashx - scripts execution is blocked because of incorrect content type Options
Fabio
Posted: Thursday, July 7, 2016 12:10:36 PM
Rank: Member
Groups: Member

Joined: 1/9/2008
Posts: 27
Hi,

When scripts are requested from eo_web.ashx, response headers contain
Content-Type: text/html

This is causing issues when I also add this header (recommended for additional security)
X-Content-Type-Options: nosniff

Browsers (IE11, some versions of Chrome) block scripts execution when nosniff is specified. I've tested that with controls version 16.1.32.0.

Regards,
Artem
eo_support
Posted: Thursday, July 7, 2016 1:29:50 PM
Rank: Administration
Groups: Administration

Joined: 5/27/2007
Posts: 24,275
Hi,

You can choose to generate physical .js files to avoid this problem:

http://www.essentialobjects.com/doc/web/installationanddeployment/deploy.aspx

Look for "Physical script files" section.

Thanks!
Fabio
Posted: Friday, July 8, 2016 12:27:17 PM
Rank: Member
Groups: Member

Joined: 1/9/2008
Posts: 27
Thanks, will try that.


You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.