-
Type:
Bug
-
Status: Rejected
-
Priority:
Medium
-
Resolution: Cannot Reproduce
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Environment:Production
-
Bug Severity:Low
-
Level:Admin, Partner
-
Module:BenAdmin - Security
-
Reported by:Harbinger
-
Company:All Clients/Multiple Clients
Observation found in Search Employee flow
The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared content type. Current (early 2014) and legacy versions of Firefox will use the declared content type (if one is set), rather than performing MIME-sniffing.
- relates to
-
NF-2714 Vulnerability Assessment and Penetration Testing for Workterra on Azure US environment.
-
- To Do
-
| Attachment | StaticReport_Spider.html [ 69265 ] |
| Attachment | EnrollNowWithPartnerLogin.html [ 69278 ] |
| Status | Open [ 1 ] | In Development [ 10007 ] |
| Assignee | Santosh Balid [ santosh.balid ] | Prasad Pise [ prasadp ] |
| Resolution | Cannot Reproduce [ 5 ] | |
| Status | In Development [ 10007 ] | Rejected [ 10004 ] |
| Link | This issue relates to DEV-13718 [ DEV-13718 ] |