Ticket #10671: admin-ajax.diff

admin-ajax.php

@@ -17 +17 @@
 require_once('../wp-load.php');
 require_once('includes/admin.php');
 @header('Content-Type: text/html; charset=' . get_option('blog_charset'));
+@header('X-Content-Type-Options: nosniff'); // assert MIME type, disabling content sniffing in supporting browsers
 
 do_action('admin_init');