126067 - images not served as content type "image/..." is still displayed as images

Status: RESOLVED WONTFIX

(Core :: Graphics: ImageLib, defect)

Description

[Henrik Gemal]

http://entropymine.com/jason/testbed/pngmime.html
all images are shown, even though they are actually not images...

could it be a potential security risk? parsing application/zip stuff to imagelib?

20020213

Comment 1

[Matthias Versen [:Matti]]

-> Imaglib

Comment 2

[Boris Zbarsky [:bzbarsky]]

Wontfix (I've talked to Stuart about this before, asking whether I should file
this bug; he said he'd have to wontfix it if I did).  Imagelib uses the magic
numbers in the image files, since those are quite standardized and
well-defined.  Zip archives also have quite standardized, well-defined, and
different magic numbers.  "Fixing" this bug would also break a large fraction of
the sites out there (and no, this should not be a difference between quirks and
standards mode).

Note that we _do_ pass the testcase as stated.  This bug is filed on the
"Whether they should do that is debatable, since they are served with an
incorrect MIME type" part of the testcase, no?  :)

Comment 3

[Christian :Biesinger (don't email me, ping me on IRC)]

*** Bug 239961 has been marked as a duplicate of this bug. ***