Hi Gary,
Indeed, since GAS 3.00.35 and GAS 3.10, for security reasons, we have activated by default the header "X-Content-Type-Options" with value "nosniff".
In as.xcf, you can check:
<HEADER Name="X-Content-Type-Options">nosniff</HEADER>
As you noted, now the file to display requires an extension.
As you did, you can use
LOCATE var IN FILE filename
where the filename has an extension.
For example:
LET filename = os.Path.makeTempName() || ".jpg"
You can use "os.Path.makeTempName()" to create your temporary file.
Freeing your BYTE will automatically remove the related temporary file.
For example:
FREE var
We will add a migration note about this in the manuals.
Thanks for reporting and sharing.
Best regards,
Sisa.