Block script execution for non-script MIME types.

Security

Script should not execute if it is delivered with a MIME type of 'audio/*', 'image/*', 'video/*', or 'text/csv'.

Specification

Working draft or equivalent

Status in Chromium

Blink


Enabled by default (launch bug) in:

  • Chrome for desktop release 55
  • Chrome for Android release 55
  • Android WebView release 55
  • Opera release 42
  • Opera for Android release 42

Consensus & Standardization

  • In development
  • No public signals
  • No public signals
  • No signals

Owner

Last updated on 2017-06-14