Backport: Disable content sniffing on PlainTextBytes (#18365)

Gusted · web-flow · commit d644289fcb60 · 2022-01-23T01:58:09.000+02:00
- Backport of #18359
diff --git a/modules/context/context.go b/modules/context/context.go
@@ -291,6 +291,7 @@ func (ctx *Context) PlainTextBytes(status int, bs []byte) {
 	}
 	ctx.Resp.WriteHeader(status)
 	ctx.Resp.Header().Set("Content-Type", "text/plain;charset=utf-8")
+	ctx.Resp.Header().Set("X-Content-Type-Options", "nosniff")
 	if _, err := ctx.Resp.Write(bs); err != nil {
 		log.Error("Write bytes failed: %v", err)
 	}

Original file line number	Diff line number	Diff line change
`@@ -291,6 +291,7 @@ func (ctx *Context) PlainTextBytes(status int, bs []byte) {`
`291`	`291`	`}`
`292`	`292`	`ctx.Resp.WriteHeader(status)`
`293`	`293`	`ctx.Resp.Header().Set("Content-Type", "text/plain;charset=utf-8")`
	`294`	`+ ctx.Resp.Header().Set("X-Content-Type-Options", "nosniff")`
`294`	`295`	`if _, err := ctx.Resp.Write(bs); err != nil {`
`295`	`296`	`log.Error("Write bytes failed: %v", err)`
`296`	`297`	`}`