Skip to content

Instantly share code, notes, and snippets.

@swdyh

swdyh/nosniff_test.rb

Created May 11, 2013 08:52
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save swdyh/5559352 to your computer and use it in GitHub Desktop.
Save swdyh/5559352 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
nosniff_test.rb
require 'sinatra'
get '/' do
<<-EOS
<html>
<head>
<script src="nosniff.js" /></script>
<link rel="stylesheet" href="nosniff.css" />
</head>
<body>nosniff test</body>
</html>
EOS
end
get '/nosniff.js' do
content_type 'text/plain'
headers 'X-Content-Type-Options' => 'nosniff'
'alert("js")'
end
get '/nosniff.css' do
content_type 'text/plain'
headers 'X-Content-Type-Options' => 'nosniff'
'body { background-color: red; }'
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment