Skip to content

Commit

Permalink
Improved: type="text/css" was missing on a call to <<link rel="styles…
Browse files Browse the repository at this point in the history
…heet/less>>

This was reported by OWASP ZAP: "The Content-Type header is missing or empty."
Considered a low vulnerability
  • Loading branch information
JacquesLeRoux committed Apr 4, 2020
1 parent f2e6989 commit ae3ae26
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion themes/rainbowstone/template/includes/Header.ftl
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ under the License.
<link rel="stylesheet/less" href="<@ofbizContentUrl>${StringUtil.wrapString(styleSheet)}</@ofbizContentUrl>" type="text/css"/>
</#list>
</#if>
<link rel="stylesheet/less" href="<@ofbizContentUrl>/rainbowstone/${visualTheme.visualThemeId?replace("_","-")?lower_case}.less</@ofbizContentUrl>"/>
<link rel="stylesheet/less" href="<@ofbizContentUrl>/rainbowstone/${visualTheme.visualThemeId?replace("_","-")?lower_case}.less</@ofbizContentUrl>" type="text/css"/>
<#if layoutSettings.VT_HDR_JAVASCRIPT?has_content>
<#list layoutSettings.VT_HDR_JAVASCRIPT as javaScript>
<script src="<@ofbizContentUrl>${StringUtil.wrapString(javaScript)}</@ofbizContentUrl>" type="application/javascript"></script>
Expand Down

0 comments on commit ae3ae26

Please sign in to comment.