X-Content-Type-Options header
The HTTP headers X-Content-Type-Options acts as a marker that indicates the MIME-types headers in the content types headers should not be changed to the server. This header was introduced in the Internet Explorer 8 of Microsoft.
The HTTP headers X-Content-Type-Options acts as a marker that indicates the MIME-types headers in the content types headers should not be changed to the server.
This header was introduced in the Internet Explorer 8 of Microsoft.
This header block the content sniffing (non-executable MIME type into executable MIME type).
After that, all the other browsers also introduce the X-Content-Type-Options, and their MIME sniffing algorithms were less aggressive.
Sending the new X-Content-Type-Options response header with the value nosniff will prevent Internet Explorer from MIME-sniffing a response away from the declared content-type.
- On the Web site parameter, choose Options tab.
- Click on the Rule button inside the Header rules row
- Click on “New rule” button.
- Set a description of your rule.
- Add X-Content-Type-Options in the HTTP Header field
- Add nosniff in the content field
After finish, click on “Apply parameters to the system” button to make header in production mode
