JIRA will not display images with the wrong MIME type in IE due to nosniff header

XMLWordPrintable

    • 5.01
    • 12
    • Severity 3 - Minor
    • 0

      Symptoms

      Since 5.1.2, JIRA specifies "X-Content-Type-Options: nosniff" in the headers of all pages. This means that IE will not display any image which was uploaded with the incorrect MIME type. It's hard to reproduce this issue when uploading new images as they are automatically converted to PNG, however any images uploaded in previous versions before this was done are affected. It may also be possible to get such images into JIRA by specifying the wrong MIME type in a REST API request.

      Steps to Reproduce

      1. Find any image file in JIRA which has the wrong MIME type
      2. Try to view it in IE

      Workaround

      Re-upload the image so that it gets converted to PNG.

        1. screenshot-1.jpg
          screenshot-1.jpg
          146 kB

            Assignee:
            Unassigned
            Reporter:
            David Mason (Inactive)
            Votes:
            11 Vote for this issue
            Watchers:
            18 Start watching this issue

              Created:
              Updated: