# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1695340041 -7200
# Node ID da21185fd0263de5f731e9ced12a9eb79f2f0524
# Parent  9097149923ae52234c508f737811d2fdb4d8cda6
net.http.server: Support setting Content-Type of uncaught HTTP errors

mod_http_errors normally sets the Content-Type header via the response
object, which isn't available when handling these uncaught errors.

Without a Content-Type header the browser is forced to guess, which may
or may not result in something sensible.

diff -r 9097149923ae -r da21185fd026 net/http/server.lua
--- a/net/http/server.lua	Sat Sep 16 14:23:08 2023 +0200
+++ b/net/http/server.lua	Fri Sep 22 01:47:21 2023 +0200
@@ -107,7 +107,12 @@
 
 function runner_callbacks:error(err)
 	log("error", "Traceback[httpserver]: %s", err);
-	self.data.conn:write("HTTP/1.0 500 Internal Server Error\r\n\r\n"..events.fire_event("http-error", { code = 500, private_message = err }));
+	local response = { headers = { content_type = "text/plain" }; body = "" };
+	response.body = events.fire_event("http-error", { code = 500; private_message = err; response = response });
+	self.data.conn:write("HTTP/1.0 500 Internal Server Error\r\n\z\
+		X-Content-Type-Options: nosniff\r\n\z\
+		Content-Type: " .. response.header.content_type .. "\r\n\r\n");
+	self.data.conn:write(response.body);
 	self.data.conn:close();
 end