security · security.x-content-type-options.missing
Missing X-Content-Type-Options header
nosniff stops browsers MIME-sniffing a response into an executable type.
Why it matters
X-Content-Type-Options: nosniff prevents MIME-type sniffing attacks.
Example fix
X-Content-Type-Options: nosniff
Authoritative reference
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
Run a full audit of your site
Free, no signup, no crawl cap. Check this and 90+ other factors across every public page.
Audit my site →