Prevent people from adding mime type to supported_non_image_types that will m...

net/base/mime_util.cc

Index: net/base/mime_util.cc
===================================================================
--- net/base/mime_util.cc	(revision 44051)
+++ net/base/mime_util.cc	(working copy)
@@ -239,7 +239,11 @@
   "application/json",
   "application/x-x509-user-cert",
   "multipart/x-mixed-replace"
+  // Note: ADDING a new type here will probably render it AS HTML. This can
+  // result in cross site scripting.
 };
+COMPILE_ASSERT(arraysize(supported_non_image_types) == 16,
+               supported_non_images_types_must_equal_16);
 
 //  Mozilla 1.8 and WinIE 7 both accept text/javascript and text/ecmascript.
 //  Mozilla 1.8 accepts application/javascript, application/ecmascript, and