webwhiz
webwhiz copied to clipboard
Add header `X-Content-Type-Options "nosniff"`
https://infosec.mozilla.org/guidelines/web_security#x-content-type-options
all sites must set the X-Content-Type-Options header and the appropriate MIME types for files that they serve.