consul/.changelog/21704.txt
sarahalsmiller 07fae7bb0b
[Security] Fix XSS Vulnerability where content-type header wasn't explicitly set (#21704)
* explicitly add content-type anywhere possible and add middleware to set and warn

* added tests, fixed typo

* clean up unused constants

* changelog

* fix call order in middleware
2024-09-11 14:23:21 -05:00

3 lines
96 B
Plaintext

```release-note:security
Explicitly set 'Content-Type' header to mitigate XSS vulnerability.
```