No X-Content-Type-Options

WarningLow priority

Pages of this site whose response does not send X-Content-Type-Options: nosniff.

Why it matters

Without it a browser may guess what a file is instead of believing its content type, and a file uploaded as an image can be run as a script.

How to fix it

Send X-Content-Type-Options: nosniff with every response.

Skitter runs this check on every crawl, and lists each page it finds with the evidence: the header, the tag or the link that gave it away.

More in Security