System: Security: Add header rule to avoid MIME-sniffing

2 years ago · 6f32625a01
parent 3b487a5507
commit 6f32625a01
1 changed files with 4 additions and 0 deletions
--- a/.htaccess
+++ b/.htaccess
@ -113,3 +113,7 @@ AddType application/font-woff .woff .woff2
 #<IfModule mod_headers.c>
 #  Header always set Content-Security-Policy "upgrade-insecure-requests;"
 #</IfModule>
+
+<IfModule mod_headers.c>
+  Header always set X-Content-Type-Options nosniff
+</IfModule>