FALKEN'S MAZE / CHECKS / X-CONTENT-TYPE-OPTIONS

X-Content-Type-Options

What Joshua checks

Checks for an X-Content-Type-Options: nosniff header.

Why it matters

Stops browsers guessing a file's type, so an uploaded file can't be run as a script or stylesheet.

How to fix it

Send "X-Content-Type-Options: nosniff".

In the Maze Score

Worth

3 points (half for a warning)

Severity

Low

Runs on

Every scan, including the free report card

Related checks

• Content-Security-PolicyFree
• Clickjacking protectionFree
• Referrer-PolicyFree
• Permissions-PolicyFree
• Cookie flagsFree