Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-30373

JIRA will not display images with the wrong MIME type in IE due to nosniff header

    XMLWordPrintable

Details

    Description

      Symptoms

      Since 5.1.2, JIRA specifies "X-Content-Type-Options: nosniff" in the headers of all pages. This means that IE will not display any image which was uploaded with the incorrect MIME type. It's hard to reproduce this issue when uploading new images as they are automatically converted to PNG, however any images uploaded in previous versions before this was done are affected. It may also be possible to get such images into JIRA by specifying the wrong MIME type in a REST API request.

      Steps to Reproduce

      1. Find any image file in JIRA which has the wrong MIME type
      2. Try to view it in IE

      Workaround

      Re-upload the image so that it gets converted to PNG.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-31885 Uppercase Image File Extensions Cause Broken Images in IE due to nosniff Header

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CONFSERVER-26848 Confluence allows images to be uploaded with the wrong mime type, which causes them to not display in IE due to nosniff

          • Low - Low priority issues
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-30717 JIRA 5.2 is currently listing the mime-type for 'swf' as 'application/x-shockwave-flash2-preview'

          • Low - Low priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-62233 Image unable to load when attaching JPEG image with Ctrl + V in IE11

          • Low - Low priority issues
          • Gathering Impact

          Activity

            People

              Unassigned Unassigned
              dmason David Mason (Inactive)
              Votes:
              11 Vote for this issue
              Watchers:
              19 Start watching this issue

              Dates

                Created:
                Updated: