Support Article
Error occurs on enabling the X-Content-Type-Options
SA-48440
Summary
Error occurs on enabling the X-Content-Type-Options: nosniff header. Addtionally, the issue as reported in https://pdn.pega.com/support-articles/webmashup-script-does-not-process-ootb occurs.
Error Messages
Refused to execute script from 'http://xxx:yyy/prweb/PRServlet?pyActivity=pzGetURLHashes&TenantName=' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled
Steps to Reproduce
- Setup Mashup page for a case
- Setup Tomcat setting to enable the X-Content-Type-Options: nosniff (refer details on https://mesh.pega.com/thread/74700/)
- Apply HFix-35699
- Open the web page
Root Cause
Issue with response content type in the pzGetURLHashes activity for set content to the response.
Resolution
Apply HFix-39682.
Published February 13, 2018 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.