2 Apr
2014
2 Apr
'14
5:02 a.m.
Hi all, I heard that if an HTTP server does not specify charset for text/html in HTTP responses, XSS would be possible: http://openmya.hacker.jp/hasegawa/security/utf7cs.html I would like to change Mighty to specify charset=UTF-8. Before that, I would like to discuss some items on this ML. - Can we assume that recent contents are written in UTF-8? For Japanese community, the answer is probably YES. - Which components should spcify charset=UTF-8? The mime-types package? --Kazu