MIME sniffing not disabled
Scan rule · RSC-SEC-004
- Security
- Severity: Low
- CWE-430
Checks whether `X-Content-Type-Options: nosniff` stops content-type guessing.
Scan tier
- External scan (anonymous)
How to fix it
Set `X-Content-Type-Options: nosniff` globally.