Bug 529578 - Charts saved as PNG type blocked in Internet Explorer with "nosniff"
Summary: Charts saved as PNG type blocked in Internet Explorer with "nosniff"
Status: NEW
Alias: None
Product: z_Archived
Classification: Eclipse Foundation
Component: BIRT (show other bugs)
Version: 4.4.1   Edit
Hardware: PC All
: P3 blocker with 2 votes (vote)
Target Milestone: ---   Edit
Assignee: Birt-Chart-inbox@eclipse.org CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-09 09:17 EST by Anindhya Sharma CLA
Modified: 2018-01-16 22:47 EST (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Anindhya Sharma CLA 2018-01-09 09:17:32 EST 
For security we have the following directive added to our web server,

Header always set X-Content-Type-Options nosniff

With this, charts that are saved as PNG format get blocked by Internet Explorer. Debugging through BIRT code, it "appears" that this could be because of incorrect content-type being set on the servlet response.

The code is in class,

org.eclipse.birt.report.service.actionhandler.AbstractRenderImageActionHandler

Method is,

private String __getContentTypeByID (String imageId)

If we force the content-type to be set as image/png, then it works fine. But the code as is sets it to "image".

Want to iterate that this is what we have found which may be incorrect. 

Has this been reported and if yes, is this a bug? If bug, is there a patch available?

Thanks.
Comment 1 Anindhya Sharma CLA 2018-01-16 22:47:04 EST 
Any thoughts on this?