Incorrect mime-type for configuration.js

[nebulade]

Hi, first of all thanks for the great app! I am currently packaging it for Cloudron and came across an issue, where our reverse proxy in front of the app sets X-Content-Type-Options: nosniff which results in the browser refusing to use for example .js files which have the wrong content-type header. The first such issue I came across was the configuration.js route which is delivered as text/html.

For example firefox will report as:

The resource from “https://cal.domain.com/configuration.js” was blocked due to MIME type (“text/html”) mismatch (X-Content-Type-Options: nosniff).

I am not a python developer or know flask much, but is there a way to set the content type correctly or am I totally on the wrong path here?

Potentially other routes also have the wrong mime-type, will get to that later if any.

---

We're using Polar.sh so you can upvote and help fund this issue. We receive the funding once the issue is completed & confirmed by you. Thank you in advance for helping prioritize & fund our work.

[niccokunzmann]

Thanks for spotting this! Yes, the content type should be relatively easy to set... I will have a look.

Can you share the cloudron configuration? I am interested :) #143

[niccokunzmann]

I created this to correctly set the mime type in flask automatically. However some are not set on OWC side - not flasks fault.

[niccokunzmann]

Hi @nebulade, I set the content type in #243 and merged it into master. Please check if that works for you! If it does, you can close the issue.

[nebulade]

Great, thanks for the fast fix. I've just built an app package from that sha and it works as expected!