Secure Apache Nginx Mime Types With X Content Type Options Nosniff
Every resource served from a web server is associated with MIME type (also called content-type). There is a possibility to execute style sheet and steal content from another site through content type doesn’t match. You may prevent this vulnerability in Internet Explorer or Google Chrome by adding nosniff in the header. In this quick guide, I will explain how to add X-Content-Type-Options header in Apache HTTP, Nginx, IHS & Shared hosting to reduce MIME types attack risk....