http://leuksman.com/log/2008/01/24/mediawiki-security-bump/ reticula, electronica, & oddities Thu, 20 Nov 2008 23:06:08 +0000 http://wordpress.org/?v=2.6.3 http://leuksman.com/log/2008/01/24/mediawiki-security-bump/#comment-6876 Kelson Thu, 24 Jan 2008 20:19:40 +0000 http://leuksman.com/log/2008/01/24/mediawiki-security-bump/#comment-6876 My favorite example of content sniffing gone wrong (in this case, innocuously) is this one of <a href="http://diveintomark.org/archives/2004/08/13/safari-content-sniffing" rel="nofollow">Safari and XHTML</a>. It's a text/plain document that mentions XHTML and text/html in the first couple of lines, and has an email address delimited by angle brackets. One, or some combination of these was enough to convince the then-current version of Safari that it must be an XHTML document. It's since been fixed. My favorite example of content sniffing gone wrong (in this case, innocuously) is this one of Safari and XHTML. It’s a text/plain document that mentions XHTML and text/html in the first couple of lines, and has an email address delimited by angle brackets. One, or some combination of these was enough to convince the then-current version of Safari that it must be an XHTML document. It’s since been fixed.

]]>