[mapguide-internals] MIME type for MapGuide packages

[Jason Birch]

But it does; I tested it against an apache site I run using ie7.


----- Original Message -----
From: mapguide-internals-bounces at lists.osgeo.org <mapguide-internals-bounces at lists.osgeo.org>
To: MapGuide Internals Mail List <mapguide-internals at lists.osgeo.org>
Sent: Sun May 10 13:20:52 2009
Subject: Re: [mapguide-internals] MIME type for MapGuide packages

That won't work.
IE uses "MIME sniffing" meaning that it reads the first few bytes of the 
file, and sees that it is
a zip file, and then disregards all other indicators, like mime headers, 
filename etc.

It even has a special security bug due to this (also explains how it works):
http://www.h-online.com/security/Risky-MIME-sniffing-in-Internet-Explorer--/features/112589

Instead, I propose that the MapGuide server looks for both .mpg and .zip 
files in the packages folder.

Regards, Kenneth Skovhede, GEOGRAF A/S



Jason Birch skrev:
> Hi all,
>
> Currently, without a MIME type defined for mapguide packages, Internet Explorer interprets them as .zip files, causing confusion and questions by new users.  
>
> One way of dealing with this would be to register a MIME type for MapGuide packages with IANA as documented in the vendor tree section of following RFC:
>
> http://www.ietf.org/rfc/rfc4288.txt
>
> Specifically, I'd propose something like:
>
> application/vnd.osgeo.mapguide.package mgp
>
> An alternative to this would be to encourage users to configure their http servers to deliver mapguide packages with an existing standard MIME type:
>
> application/octet-stream mgp 
>
> This may be more appropriate, since MapGuide doesn't directly interact with the packages; they require user action once downloaded to be used.
>
> I'm OK with either solution, but would like feedback so that we can either proceed with the registration or with documenting the preferred solution on the wiki.  Once I get some feedback, I'll take care of the registration (if required), having the OSGeo download server configured to implement the chosen solution, and documenting the chosen approach on the wiki.
>
> Jason_______________________________________________
> mapguide-internals mailing list
> mapguide-internals at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/mapguide-internals
>   
_______________________________________________
mapguide-internals mailing list
mapguide-internals at lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapguide-internals