-
Notifications
You must be signed in to change notification settings - Fork 53
TWA 0209
Thomas Young-Audet edited this page Jun 8, 2020
·
1 revision
"X-Frame-Options missing"
twa detected a missing Content-Type header which means that this website could be at risk of a MIME-sniffing attacks.
When serving resources, make sure you send the content-type header to appropriately match the type of the resource being served. For example, if you are serving an HTML page, you should send the HTTP header: Content-Type: text/html
Add the X-Content-Type-Options header with a value of "nosniff" to inform the browser to trust what the site has sent is the appropriate content-type, and to not attempt "sniffing" the real content-type: X-Content-Type-Options: nosniff