X-Content-Type-Options header
This header stops browsers from guessing (sniffing) a file's type and makes them respect the Content-Type you send.
Recommended value
X-Content-Type-Options: nosniffWhat it protects against
Attacks where an uploaded or user-controlled file is interpreted as a script or stylesheet.
Before you turn it on
Make sure your server sends correct Content-Type headers, or some files may stop loading.
How to add X-Content-Type-Options
Check your site's headers now
Korrali Web scans your site and shows which security headers are missing or misconfigured.
Run a free scan