From d38a31222006c2ce17bc39cf4db35e1467c37625 Mon Sep 17 00:00:00 2001 From: Tim Starling Date: Wed, 18 Mar 2009 20:20:10 +0000 Subject: [PATCH] Use a content type that's not an XSS risk --- includes/AjaxResponse.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/AjaxResponse.php b/includes/AjaxResponse.php index 63468a14da..de6b3c56a4 100644 --- a/includes/AjaxResponse.php +++ b/includes/AjaxResponse.php @@ -45,7 +45,7 @@ class AjaxResponse { $this->mText = ''; $this->mResponseCode = '200 OK'; $this->mLastModified = false; - $this->mContentType= 'text/html; charset=utf-8'; + $this->mContentType= 'application/x-wiki'; if ( $text ) { $this->addText( $text ); -- 2.20.1