XF 1.4 Unable to decode image at URL

[KakersUK]

My forum seems to load fine in Chrome and Firefox, but when I load it up in IE (11) it doesn't load the avatar images at all. Looking at the IE console the error I get is "Unable to decode image at URL".

https://www.etkcodex.com/community/

Couldn't find anything similar after searching around so any help would be appreciated!

 

[Mike]

There appear to be some non-standard hearders added here. I think it's actually the "nosniff" header that you're adding here, as the image is actually a PNG but we serve it with a .jpg extension (this is not normally an issue).

 

[KakersUK]

That will probably be because I have NGINX in front of Apache for SSL termination. I don't seem to get the issue if I load the site directly through Apache so I guess the problem lies somewhere with NGINX.

 

[KakersUK]

Removed the nosniff header which NGINX was adding and it's working now, thanks for your help!

 

[Deebs]

There appear to be some non-standard hearders added here. I think it's actually the "nosniff" header that you're adding here, as the image is actually a PNG but we serve it with a .jpg extension (this is not normally an issue).

Mike,

Can we revisit this please? More and more admins are implementing the OWASP security recommendations and the X-Content-Type-Options nosniff is causing problems due to the your statement above where you are not serving the files with the true extension of how they are stored.

https://www.owasp.org/index.php/List_of_useful_HTTP_headers

Regards