summaryrefslogtreecommitdiff
path: root/CHANGELOG.txt
diff options
context:
space:
mode:
Diffstat (limited to 'CHANGELOG.txt')
-rw-r--r--CHANGELOG.txt2
1 files changed, 2 insertions, 0 deletions
diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 23b66697d..069595046 100644
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -1,6 +1,8 @@
Drupal 7.40, xxxx-xx-xx (development version)
-----------------------
+- Set the X-Content-Type-Options header to "nosniff" when possible, to prevent
+ certain web browsers from picking an unsafe MIME type.
- Prevented the database API from executing multiple queries at once on MySQL,
if the site's PHP version is new enough to do so. This is a secondary defense
against SQL injection attacks.