Fix
Missing X-Content-Type-Options
Disable MIME sniffing to reduce content-type confusion attacks.
InfoCategory: security
Related checks
Fix steps
- Set X-Content-Type-Options: nosniff at edge/proxy.
Verify
- Re-run Headers Check and confirm it’s present.