Ticket #10671: 10671.diff

wp-admin/admin-ajax.php

@@ -21 +21 @@
 
 require_once('includes/admin.php');
 @header('Content-Type: text/html; charset=' . get_option('blog_charset'));
+@header( 'X-Content-Type-Options: nosniff' );
 
 do_action('admin_init');
 

wp-admin/index-extra.php

@@ -13 +13 @@
 require( 'includes/dashboard.php' );
 
 @header( 'Content-Type: ' . get_option( 'html_type' ) . '; charset=' . get_option( 'blog_charset' ) );
+@header( 'X-Content-Type-Options: nosniff' );
 
 switch ( $_GET['jax'] ) {