I\'m writing a web application API, where when someone accesses a URL, it returns text data. I set the content-type to \"text/plain\", but when I access it with Chrome, it down
Laurence's explanation is correct. Only IE and Chrome is performing mime sniffing at the time of this post. You can now just set the HTTP header X-Content-Type-Options: nosniff and it will do the trick!