X-Content-Type-Options

nosniff: trust my Content-Type, never guess. One value, no downside, always send it.

response header

Example

X-Content-Type-Options: nosniff

What it does: nosniff: trust my Content-Type, never guess. One value, no downside, always send it.

Works with