用Chrome浏览网站,执行一个javascript时,出现如下错误:
Refused to execute script from 'http://mysite.com/info?no=31&magic=9543' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.
其他浏览器,如火狐就没问题。
在StackOverflow上得知的一种简单方式是设置 HTTP header X-XSS-Protection:
X-XSS-Protection: 0
http://stackoverflow.com/questions/1547884/refused-to-execute-a-javascript-script-source-code-of-script-found-within-reque
这是最好的解决办法吗?
解决办法是把 MIME type 的 text/html 改成 application/x-javascript