The X-Content-Type-Options: nosniff header forbids the browser from “guessing” the file type, which could otherwise turn uploaded text into an executable script. It is a simple and safe protection.
FAQ / Glossary
FAQ / Glossary
The X-Content-Type-Options: nosniff header forbids the browser from “guessing” the file type, which could otherwise turn uploaded text into an executable script. It is a simple and safe protection.