GSA / smartpay-training

Prototype for new GSA SmartPay training quizzes
8 stars 4 forks source link

Missing X-Content-Type-Options Header #575

Open JennaySDavis opened 4 weeks ago

JennaySDavis commented 4 weeks ago

Invicti Enterprise detected a missing X-Content-Type-Options header which means that this website could be at risk of a MIME- sniffing attacks.

Remedy:

Add the X-Content-Type-Options header with a value of "nosniff" to inform the browser to trust what the site has sent is the appropriate content type, and do not attempt "sniffing" the real content type.