Adding nosniff Header

[jasisk]

module.exports = function nosniff() {
    return function nosniff(req, res, next) {
        res.header('X-Content-Type-Options', 'no sniff');
        next();
    };
}

lusca itself won't include nosniff unless you give it a truth value:

lusca({ nosniff: true }) // will have nosniff
lusca({ nosniff: false }) // will NOT have nosniff
lusca({}) // will NOT have nosniff

[linkRace]

xssProtection?

[jasisk]

xssProtection?

edited. C/P from your code.

[linkRace]

Cool, updated file.

[jasisk]

Throw some documentation in the README and I'm a :+1:.

[linkRace]

Cool, combine this with the csp update to make a 1.3.1 release I'd think.

[grawk]

Looks like the CI job is failing on the jshint check. Also, it'd be a good idea to update the .travis.yml config to just test on node 4 and maybe node 0.12

[grawk]

un-plus-one'ing until other comments addressed

[jasisk]

This needs tests, no?

[tlivings]

Got merged without 2 :+1: ?