1587448 - Enable XTCO-nosniff for FF 71

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P1)

Description

[Sebastian Streich [:sstreich]]

We set the pref for nosniff to false in ff 70 -
as we have enough time to fix the problems in this cycle we can enable it for 71

Comment 1

[Sebastian Streich [:sstreich]]

Attachment: Bug 1587448 enable XTCO-nosniff by default r=ckerschb

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0115a701a8e7
enable XTCO-nosniff by default r=ckerschb

Comment 3

[Cristina Coroiu [:ccoroiu]]

https://hg.mozilla.org/mozilla-central/rev/0115a701a8e7

Comment 4

[Florin Strugariu [:Bebe] (needinfo me)]

== Change summary for alert #23453 (as of Mon, 14 Oct 2019 10:54:24 GMT) ==

Improvements:

5% raptor-tp6-paypal-firefox-cold loadtime linux64-shippable opt 365.75 -> 347.25
5% raptor-tp6-paypal-firefox-cold loadtime linux64-shippable opt 364.67 -> 346.58
3% raptor-tp6-paypal-firefox-cold linux64-shippable opt 328.40 -> 319.97

For up to date results, see: https://treeherder.mozilla.org/perf.html#/alerts?id=23453

Comment 5

[Kohei Yoshino]

Posted site compatibility note: https://www.fxsitecompat.dev/en-CA/docs/2019/x-content-type-options-nosniff-now-applies-to-top-level-documents-causing-some-pages-to-be-downloaded/

Comment 6

[Chris Mills (Mozilla, MDN editor) [:cmills]]

Disabled, so no docs to write for now. Will follow up on this during the Fx72 docs cycle.