29886093225
100%

Ran 22 Jul 2026 02:33AM UTC

Jobs 3

Files 1

Run time 1min

Badge

Embed ▾

Committed 21 Jul 2026 08:16PM UTC coverage: 100.0%. Remained the same

Build # 29886093225

Build Type

push

github

Committed by

dominikzogg

Commit Message

Prevent MIME sniffing: default Content-Type, always send nosniff (Fable 5)

If the extension was unknown, no Content-Type header was sent at all and
there was no X-Content-Type-Options: nosniff. Browsers would then sniff
the body - if the served directory can contain attacker-influenced files
(uploads, generated content), an HTML/JS payload with an unknown
extension executes on the origin.

Fix: default to application/octet-stream and always send
X-Content-Type-Options: nosniff on every response (200, 304, HEAD).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Coverage Stats

47 of 47 relevant lines covered (100.0%)

78.38 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	29886093225.1	22 Jul 2026 02:33AM UTC	1	100.0	GitHub Action Run
2	29886093225.2	22 Jul 2026 02:33AM UTC	1	100.0	GitHub Action Run
3	29886093225.3	22 Jul 2026 02:33AM UTC	1	100.0	GitHub Action Run

chubbyphp / chubbyphp-static-file / 29886093225
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 29886093225

chubbyphp / chubbyphp-static-file / 29886093225 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 29886093225

chubbyphp / chubbyphp-static-file / 29886093225
100%

README BADGES
x