X-Content-Type-Options: nosniff tells browsers to trust the Content-Type header and not guess. Prevents a class of XSS attacks where a browser mis-interprets a text file as JavaScript. Set on every response.
X-Content-Type-Options: nosniff tells browsers to trust the Content-Type header and not guess. Prevents a class of XSS attacks where a browser mis-interprets a text file as JavaScript. Set on every response.