Website · Fix guide
MIME sniffing protection missing
- MIME
- Multipurpose Internet Mail Extensions
The final response lacks X-Content-Type-Options: nosniff.
What is MIME sniffing protection?
X-Content-Type-Options: nosniff tells browsers to respect the declared Content-Type rather than guessing. That helps prevent a file from being interpreted as executable content unexpectedly.
What to do next
- Add X-Content-Type-Options: nosniff to web responses.
- Confirm scripts and styles use correct Content-Type values.
Useful links
How to verify the fix
Inspect the final response headers for the exact nosniff value.
When this result may be wrong
Some applications add the header only to HTML or at a CDN layer, so other URLs may differ.
Ready to check again?
Check a domain
Run a fresh report after DNS caches and platform changes have had time to update.