Backport: Disable content sniffing on `PlainTextBytes` (#18365)

- Backport of #18359
2022-01-22 23:58:09 +00:00 · 2022-01-22 23:58:09 +00:00 · d644289fcb
parent fd9ff7cd6f
commit d644289fcb
1 changed files with 1 additions and 0 deletions
--- a/modules/context/context.go
+++ b/modules/context/context.go
@ -291,6 +291,7 @@ func (ctx *Context) PlainTextBytes(status int, bs []byte) {
 	}
 	ctx.Resp.WriteHeader(status)
 	ctx.Resp.Header().Set("Content-Type", "text/plain;charset=utf-8")
+	ctx.Resp.Header().Set("X-Content-Type-Options", "nosniff")
 	if _, err := ctx.Resp.Write(bs); err != nil {
 		log.Error("Write bytes failed: %v", err)
 	}