Setting X-Content-Type-Options:nosniff in response header is not allowing the DWR calls to execute. Getting text/plain MIME type mismatch. Is there a solution for this?
I had the same problem activating X-Content-Type-Options: nosniff in the IHS server. I got crazy trying to solve it but the only thing that I found to avoid this error is doing a work-around.
UPDATE: The DWR is an open source lib, you can modify it. The problem is in the lib because all the js that serve in the interface folder and in the plainjs folder, it set the content type to text/plain. Modify it and it will solve the problem.
©2020 All rights reserved.