GSA / 889-tool

Web service for determining 889 compliance of vendors
1 stars 0 forks source link

Missing X-Content-Type-Options Header #243

Open JennaySDavis opened 4 weeks ago

JennaySDavis commented 4 weeks ago

Invicti Enterprise detected a missing X-Content-Type-Options header which means that this website could be at risk of a MIME- sniffing attacks.

Remedy: Add the X-Content-Type-Options header with a value of "nosniff" to inform the browser to trust what the site has sent is the appropriate content type, and do not attempt "sniffing" the real content type.