Images and drop down boxes are not populating after configuring X-Content-Type-Options: nosniff response header

[Sandeep]

Hi Team,

For the security purpose we have configured the web server to always send the X-Content-Type-Options: nosniff specification in the response headers. But images and drop down boxes are not populating after configuring this header. 

Please find the attached screenshots which would explain the issue clearly.

Could you please help us on how to fix this issue when X-Content-Type-Options: nosniff is configured?

Thank you,

Sandeep

Attachment: screenshots_cb3d031d.zip

[Ramesh Govindaraj]

Hi Sandeep, 

Thank you for using Syncfusion products. 

The statement “X-Content-Type-Options: nosniff” in web.config file doesn’t consider MIME type info while deploying the sample which results some of the images/icons not displayed. This is happened only in Internet Explorer. Please find the following links which shows the conversation regarding the reported problem. 

http://stackoverflow.com/questions/20537839/c-sharp-asp-x-content-type-options-internet-explorer-not-displaying-png-files  

http://stackoverflow.com/questions/28720625/should-i-use-x-content-type-optionsnosniff-on-images  

http://drupal.stackexchange.com/questions/192742/some-images-are-not-displayed-in-ie  

So, kindly replace the above mentioned statement with any other alternative option to improve the security. 

Regards,
Ramesh G. 

[Sandeep]

Hi Ramesh,

Thanks for your reply.

There is no alternatives for this security fix.

The issue is image type and the extension are not matching, so IE browser is not populating the images. Could you please review this from your end that why these images have mismatch?

Thank you, 

Sandeep 

[Ramesh Govindaraj]

Hi Sandeep, 

We have raised your query in “Stack Overflow” and “MSDN” to get a solution for the reported problem. Please find the below links where you can trace the query to get the solution. 

http://stackoverflow.com/questions/39262900/icons-images-not-loaded-in-ie-after-adding-x-content-type-options-nosniff-in  

https://social.msdn.microsoft.com/Forums/en-US/885cb305-f25f-443e-b89d-cd72c952855d/iconsimages-not-loaded-in-ie-after-adding-xcontenttypeoptions-nosniff-in-webconfig-file?forum=iewebdevelopment  

Regards,
Ramesh G. 

 

[Sandeep]

Hi Ramesh,

It's a known issue that when the image type and extension are not matching then IE browser will not populate that image. So please check why these images have mismatch.

An could you please follow up with the query in “Stack Overflow” and “MSDN” ?

Thanks,

Sandeep

[Ramesh Govindaraj]

Hi Sandeep, 

We have added your query in both “Stack Overflow” and “MSDN”. Additionally we have raised the entire query in “ASP.NET” forum which was suggested from “MSDN”. Please find the below link to track “ASP.NET” forum. 

 

http://forums.asp.net/p/2103596/6080453.aspx?p=True&t=636094849188240846  

Regards,
Ramesh G.